microsoft/mu_plus holds a health index of 81 out of 100, placing it in the Good band. It scores highest on Vitality (96/100) and lowest on AI Readiness (62/100). It was last updated 6 days ago. 4 contributors account for most of its recent work.
81
overall / 100
Good
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
81
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Direct dependencies free of known advisories — no direct dependency carries a known advisory
0/25
Indirect dependencies free of known advisories — transitive set not separable from development and test dependencies in this scope
0/40
No advisories left outstanding — no advisory carries a publication date
Inputs used
source
osv
advisories
0
affected_packages
0
assessed_packages
6
unassessed_packages
0
affected_by_severity
none
direct_affected_packages
0
Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 6 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
Manageable file sizes — 34/658 source files over 60KB
Inputs used
primary_language
C
largest_source_bytes
719,599
source_files_sampled
658
oversized_source_files
34
Key facts
264GitHub stars
68contributors
163commits, last 12 months
6days since last push
100releases
4bus factor
4open issues
crates.iopackage ecosystems
Data collection warnings
Could not fetch crates package 'UefiHidDxe' from its registry
Could not fetch crates package 'UefiHidDxeV2' from its registry
More detail
Star and fork history 264 ★ / 126 ⇿
264Stars
126Forks
98Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 21Minor 10Patch 54
Each point covers 8 days.
OpenSSF Scorecard 7.7 / 10
7.7aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-22 03:33 UTC
Full resolved dependency set from the GitHub dependency graph: 0 direct and 6 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
Registry
Package
Version
Relation
NuGet
Microsoft.Windows.CppWinRT
2.0.240111.5
indirect
PyPI
antlr4-python3-runtime
4.13.2
indirect
PyPI
edk2-pytool-extensions
0.31.0
indirect
PyPI
edk2-pytool-library
0.23.15
indirect
PyPI
pygount
3.2.0
indirect
PyPI
regex
2026.7.10
indirect
Dependency advisories 0
This repository publishes no package the index resolves, so its own dependency graph was assessed — 6 packages, which also include development and test pins that never ship: 0 carry known advisories, of which 0 are direct.
No known advisories affect the assessed dependencies.
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"firmware",
"uefi",
"projectmu",
"uefi-development"
],
"is_fork": false,
"size_kb": 15773,
"has_wiki": false,
"homepage": "https://microsoft.github.io/mu/",
"languages": {
"C": 9873812,
"C++": 37834,
"HTML": 123196,
"Rust": 544673,
"Python": 222752,
"BitBake": 4717,
"Assembly": 10623,
"Batchfile": 3517,
"PowerShell": 5434,
"DenizenScript": 24352
},
"pushed_at": "2026-07-16T00:26:27Z",
"created_at": "2018-09-08T01:06:17Z",
"owner_type": "Organization",
"updated_at": "2026-07-16T00:24:39Z",
"description": "Project Mu Microsoft Core UEFI Value",
"is_archived": false,
"is_disabled": false,
"license_spdx": null,
"default_branch": "release/202511",
"license_spdx_raw": "NOASSERTION",
"primary_language": "C",
"significant_languages": [
"C"
]
},
"owner": {
"blog": "https://opensource.microsoft.com",
"name": "Microsoft",
"type": "Organization",
"login": "microsoft",
"company": null,
"location": "Redmond, WA",
"followers": 125580,
"avatar_url": "https://avatars.githubusercontent.com/u/6154722?v=4",
"created_at": "2013-12-10T19:06:48Z",
"is_verified": null,
"public_repos": 8215,
"account_age_days": 4606
},
"license": {
"state": "custom",
"spdx_id": null,
"raw_spdx": "NOASSERTION",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v2025110003.0.1",
"kind": "patch",
"published_at": "2026-07-13T21:44:21Z"
},
{
"tag": "v2025110003.0.0",
"kind": "major",
"published_at": "2026-06-26T16:57:03Z"
},
{
"tag": "v2025110002.0.1",
"kind": "patch",
"published_at": "2026-06-26T14:38:17Z"
},
{
"tag": "v2025110002.0.0",
"kind": "major",
"published_at": "2026-06-25T18:24:52Z"
},
{
"tag": "v2025110001.0.0",
"kind": "major",
"published_at": "2026-06-08T18:29:04Z"
},
{
"tag": "v2025020003.0.4",
"kind": "patch",
"published_at": "2026-07-13T21:44:10Z"
},
{
"tag": "v2025110000.0.4",
"kind": "patch",
"published_at": "2026-04-23T20:05:35Z"
},
{
"tag": "v2025110000.0.3",
"kind": "patch",
"published_at": "2026-04-02T14:55:42Z"
},
{
"tag": "v2025110000.0.2",
"kind": "patch",
"published_at": "2026-03-23T20:12:17Z"
},
{
"tag": "v2025110000.0.1",
"kind": "patch",
"published_at": "2026-03-18T21:19:09Z"
},
{
"tag": "v2025110000.0.0",
"kind": "major",
"published_at": "2026-03-11T04:11:27Z"
},
{
"tag": "v2025020003.0.3",
"kind": "patch",
"published_at": "2026-02-23T18:26:57Z"
},
{
"tag": "v2025020003.0.2",
"kind": "patch",
"published_at": "2026-02-10T19:22:43Z"
},
{
"tag": "v2025020003.0.1",
"kind": "patch",
"published_at": "2026-02-10T05:10:21Z"
},
{
"tag": "v2025020003.0.0",
"kind": "major",
"published_at": "2025-09-19T19:03:02Z"
},
{
"tag": "dev-v2025020002.0.1",
"kind": "other",
"published_at": "2025-09-11T16:31:18Z"
},
{
"tag": "v2025020002.0.1",
"kind": "patch",
"published_at": "2025-09-11T16:31:27Z"
},
{
"tag": "v2025020002.0.0",
"kind": "major",
"published_at": "2025-08-28T18:48:20Z"
},
{
"tag": "dev-v2025020002.0.0",
"kind": "other",
"published_at": "2025-08-28T18:48:11Z"
},
{
"tag": "v2025020001.0.3",
"kind": "patch",
"published_at": "2025-08-27T16:40:33Z"
},
{
"tag": "dev-v2025020001.0.3",
"kind": "other",
"published_at": "2025-08-27T16:39:54Z"
},
{
"tag": "v2025020001.0.2",
"kind": "patch",
"published_at": "2025-07-24T18:48:00Z"
},
{
"tag": "dev-v2025020001.0.2",
"kind": "other",
"published_at": "2025-07-24T18:47:46Z"
},
{
"tag": "v2025020001.0.1",
"kind": "patch",
"published_at": "2025-07-11T15:50:55Z"
},
{
"tag": "dev-v2025020001.0.1",
"kind": "other",
"published_at": "2025-07-11T15:50:43Z"
},
{
"tag": "v2025020001.0.0",
"kind": "major",
"published_at": "2025-07-03T15:47:00Z"
},
{
"tag": "dev-v2025020001.0.0",
"kind": "other",
"published_at": "2025-07-03T15:46:47Z"
},
{
"tag": "v2025020000.1.1",
"kind": "patch",
"published_at": "2025-06-03T22:21:54Z"
},
{
"tag": "dev-v2025020000.1.1",
"kind": "other",
"published_at": "2025-06-03T22:21:42Z"
},
{
"tag": "v2025020000.1.0",
"kind": "minor",
"published_at": "2025-06-02T22:40:59Z"
},
{
"tag": "dev-v2025020000.1.0",
"kind": "other",
"published_at": "2025-06-02T22:40:38Z"
},
{
"tag": "v2025020000.0.1",
"kind": "patch",
"published_at": "2025-05-09T22:09:13Z"
},
{
"tag": "dev-v2025020000.0.1",
"kind": "other",
"published_at": "2025-05-09T22:09:01Z"
},
{
"tag": "v2024050003.0.0",
"kind": "major",
"published_at": "2025-05-06T16:12:05Z"
},
{
"tag": "dev-v2024050003.0.0",
"kind": "other",
"published_at": "2025-05-06T16:00:32Z"
},
{
"tag": "v2025020000.0.0",
"kind": "major",
"published_at": "2025-04-30T22:33:59Z"
},
{
"tag": "dev-v2025020000.0.0",
"kind": "other",
"published_at": "2025-04-30T22:33:11Z"
},
{
"tag": "dev-v2024050002.0.0",
"kind": "other",
"published_at": "2025-03-31T22:35:33Z"
},
{
"tag": "v2024050002.0.0",
"kind": "major",
"published_at": "2025-03-31T22:35:52Z"
},
{
"tag": "dev-v2024050001.0.4",
"kind": "other",
"published_at": "2025-02-04T17:45:14Z"
},
{
"tag": "v2024050001.0.3",
"kind": "patch",
"published_at": "2025-02-04T16:49:33Z"
},
{
"tag": "v2024050001.0.4",
"kind": "patch",
"published_at": "2025-02-04T17:45:23Z"
},
{
"tag": "v2024050001.0.2",
"kind": "patch",
"published_at": "2024-12-03T16:44:48Z"
},
{
"tag": "v2024050001.0.1",
"kind": "patch",
"published_at": "2024-11-15T22:57:00Z"
},
{
"tag": "v2024050001.0.0",
"kind": "major",
"published_at": "2024-09-24T13:56:11Z"
},
{
"tag": "v2023110003.0.0",
"kind": "major",
"published_at": "2024-09-24T13:55:44Z"
},
{
"tag": "v2024050000.0.0",
"kind": "major",
"published_at": "2024-08-28T16:41:51Z"
},
{
"tag": "v2023110002.0.2",
"kind": "patch",
"published_at": "2024-08-22T02:33:41Z"
},
{
"tag": "v2023110002.0.1",
"kind": "patch",
"published_at": "2024-08-06T14:22:05Z"
},
{
"tag": "v2023110002.0.0",
"kind": "major",
"published_at": "2024-07-29T22:16:20Z"
},
{
"tag": "v2023110001.0.3",
"kind": "patch",
"published_at": "2024-07-16T14:31:38Z"
},
{
"tag": "v2023110001.0.2",
"kind": "patch",
"published_at": "2024-07-13T18:28:22Z"
},
{
"tag": "v2023020006.1.3",
"kind": "patch",
"published_at": "2024-08-06T14:21:36Z"
},
{
"tag": "v2023110001.0.1",
"kind": "patch",
"published_at": "2024-06-05T22:24:58Z"
},
{
"tag": "v2023110001.0.0",
"kind": "major",
"published_at": "2024-05-17T22:42:01Z"
},
{
"tag": "v2023110000.0.6",
"kind": "patch",
"published_at": "2024-04-27T00:20:13Z"
},
{
"tag": "v2023110000.0.5",
"kind": "patch",
"published_at": "2024-04-17T20:47:26Z"
},
{
"tag": "v2023110000.0.4",
"kind": "patch",
"published_at": "2024-04-08T14:59:15Z"
},
{
"tag": "v2023110000.0.3",
"kind": "patch",
"published_at": "2024-03-22T20:03:38Z"
},
{
"tag": "v2023110000.0.2",
"kind": "patch",
"published_at": "2024-03-05T15:17:52Z"
},
{
"tag": "v2023020006.1.2",
"kind": "patch",
"published_at": "2024-03-05T15:18:14Z"
},
{
"tag": "v2023110000.0.1",
"kind": "patch",
"published_at": "2024-02-15T14:48:23Z"
},
{
"tag": "v2023110000.0.0",
"kind": "major",
"published_at": "2024-02-05T14:56:44Z"
},
{
"tag": "v2023020006.1.1",
"kind": "patch",
"published_at": "2024-01-26T19:45:06Z"
},
{
"tag": "v2023020006.1.0",
"kind": "minor",
"published_at": "2024-01-20T03:41:15Z"
},
{
"tag": "v2023020006.0.2",
"kind": "patch",
"published_at": "2024-01-20T02:12:57Z"
},
{
"tag": "v2023020006.0.1",
"kind": "patch",
"published_at": "2024-01-19T16:55:47Z"
},
{
"tag": "v2023020006.0.0",
"kind": "major",
"published_at": "2024-01-10T22:07:42Z"
},
{
"tag": "v2023020005.0.0",
"kind": "major",
"published_at": "2024-01-10T20:02:13Z"
},
{
"tag": "v2023020004.1.2",
"kind": "patch",
"published_at": "2024-01-10T19:48:13Z"
},
{
"tag": "v2023020004.1.1",
"kind": "patch",
"published_at": "2023-12-21T03:41:30Z"
},
{
"tag": "v2023020004.1.0",
"kind": "minor",
"published_at": "2023-12-14T15:58:19Z"
},
{
"tag": "v2023020004.0.5",
"kind": "patch",
"published_at": "2023-12-13T20:52:29Z"
},
{
"tag": "v2023020004.0.4",
"kind": "patch",
"published_at": "2023-12-12T18:55:18Z"
},
{
"tag": "v2023020004.0.3",
"kind": "patch",
"published_at": "2023-12-08T21:26:22Z"
},
{
"tag": "v2023020004.0.2",
"kind": "patch",
"published_at": "2023-12-08T20:05:31Z"
},
{
"tag": "v2023020004.0.1",
"kind": "patch",
"published_at": "2023-12-05T22:04:10Z"
},
{
"tag": "v2023020004.0.0",
"kind": "major",
"published_at": "2023-11-29T22:59:34Z"
},
{
"tag": "v2023020003.4.0",
"kind": "minor",
"published_at": "2023-11-29T18:34:31Z"
},
{
"tag": "v2023020003.3.1",
"kind": "patch",
"published_at": "2023-11-28T20:35:10Z"
},
{
"tag": "v2023020003.3.0",
"kind": "minor",
"published_at": "2023-11-16T20:26:12Z"
},
{
"tag": "v2023020003.2.2",
"kind": "patch",
"published_at": "2023-11-15T21:09:27Z"
},
{
"tag": "v2023020003.2.1",
"kind": "patch",
"published_at": "2023-11-14T23:30:40Z"
},
{
"tag": "v2023020003.2.0",
"kind": "minor",
"published_at": "2023-11-07T02:54:13Z"
},
{
"tag": "v2023020003.1.0",
"kind": "minor",
"published_at": "2023-11-06T23:39:41Z"
},
{
"tag": "v2023020003.0.1",
"kind": "patch",
"published_at": "2023-10-31T15:32:19Z"
},
{
"tag": "v2023020003.0.0",
"kind": "major",
"published_at": "2023-10-26T20:46:24Z"
},
{
"tag": "v2023020002.1.0",
"kind": "minor",
"published_at": "2023-10-20T19:28:35Z"
},
{
"tag": "v2023020002.0.4",
"kind": "patch",
"published_at": "2023-10-18T23:22:30Z"
},
{
"tag": "v2023020002.0.3",
"kind": "patch",
"published_at": "2023-10-17T23:00:31Z"
},
{
"tag": "v2023020002.0.2",
"kind": "patch",
"published_at": "2023-10-13T20:55:16Z"
},
{
"tag": "v2023020002.0.1",
"kind": "patch",
"published_at": "2023-10-11T16:17:14Z"
},
{
"tag": "v2023020002.0.0",
"kind": "major",
"published_at": "2023-10-11T07:40:08Z"
},
{
"tag": "v2023020001.5.2",
"kind": "patch",
"published_at": "2023-10-06T01:24:17Z"
},
{
"tag": "v2023020001.5.1",
"kind": "patch",
"published_at": "2023-09-26T19:38:47Z"
},
{
"tag": "v2023020001.5.0",
"kind": "minor",
"published_at": "2023-09-06T17:24:24Z"
},
{
"tag": "v2023020001.4.1",
"kind": "patch",
"published_at": "2023-08-30T21:01:55Z"
},
{
"tag": "v2023020001.4.0",
"kind": "minor",
"published_at": "2023-08-30T14:23:24Z"
},
{
"tag": "v2023020001.3.2",
"kind": "patch",
"published_at": "2023-08-30T01:27:29Z"
},
{
"tag": "v2023020001.3.1",
"kind": "patch",
"published_at": "2023-08-29T04:37:01Z"
}
],
"recent_commits": [
{
"oid": "553e629fa87fc6d5136c8bb90bcaa9e12a4f8b87",
"body": "synced local file(s) with\n[microsoft/mu_devops](https://github.com/microsoft/mu_devops).\n\n🤖: View the [Repo File Sync Configuration\nFile](https://github.com/microsoft/mu_devops/blob/main/.sync/Files.yml)\nto see how files are synced.\n\n---\n\nThis PR was created automatically by the\n[repo-file-sync-acti\n[…]\ncom/microsoft/mu_devops/actions/runs/29457513730)\n\nSigned-off-by: Project Mu UEFI Bot <uefibot@microsoft.com>\nCo-authored-by: mu-automation[bot] <204385837+mu-automation[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Repo File Sync: change dependabot schedule to monthly (#921)",
"author_name": "mu-automation[bot]",
"author_login": "mu-automation[bot]",
"committed_at": "2026-07-16T00:24:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "067d701630f86504516e3826daf9529d4aa37761",
"body": "Updates `regex` from 2026.6.28 to 2026.7.10\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "pip: bump regex from 2026.6.28 to 2026.7.10 (#920)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-15T22:27:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cad95a5e227196235b49fe99a3c8e79dcd0108db",
"body": "https://github.com/microsoft/mu_plus/commit/1d1b4dbb468755c8a3e7558701b60b6e41a88b09\nchanged the behavior of runtime AdvLogger prints to always print to the\nserial port. This breaks platforms who give up control of the serial\nport to an OS after ExitBootServices.\n\nhttps://github.com/microsoft/mu_plu\n[…]\nvior\nand not log to the hardware port at runtime by default. Platforms\nmay set this PCD to FALSE if it is safe to do so on their\nimplementation.\n\nSigned-off-by: Oliver Smith-Denny <osde@microsoft.com>",
"is_bot": false,
"headline": "AdvLoggerPkg: Default PcdAdvancedLoggerHdwPortOsRuntimeDisable to TRUE",
"author_name": "Oliver Smith-Denny",
"author_login": "os-d",
"committed_at": "2026-07-13T21:31:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fcb7c7028dfd21bd80c4ec0b0ac7130c20696cf5",
"body": "Updates `edk2-pytool-library` from 0.23.13 to 0.23.15\nUpdates `regex` from 2026.5.9 to 2026.6.28\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "pip: bump edk2-pytool-library to 0.23.15, regex to 2026.6.28 (#917)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-01T17:39:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "445c2ab8f31878dcb85b49043cd0e246041da95f",
"body": "When the local PeiMain.h was brought in, SecDebugAgent was\nmissed. Use the local as a temporary workaround.\n\nSigned-off-by: Oliver Smith-Denny <osde@microsoft.com>",
"is_bot": false,
"headline": "AdvLoggerPkg: Sec Debug Agent: Use Local PeiMain.h",
"author_name": "Oliver Smith-Denny",
"author_login": "os-d",
"committed_at": "2026-06-26T16:51:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6d1ee4821fd7b22136de96c5cd8f6fba3c1fa9bc",
"body": "Update the override tag in PeiMain.h as it has been updated\nin basecore v2025110002.0.8.\n\nSigned-off-by: Oliver Smith-Denny <osde@microsoft.com>",
"is_bot": false,
"headline": "AdvLoggerPkg: PeiCore Instance: Update Override Tag",
"author_name": "Oliver Smith-Denny",
"author_login": "os-d",
"committed_at": "2026-06-26T16:51:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "81baa8ad8dfd4b852b25d366ab1ad358d581620e",
"body": "PeilessArm currently assumes it is setting up the adv logger\nbuffer. However, an earlier phase may have initialized the\nbuffer, such as StMM running before SEC is started.\n\nThis adds a check to see if the buffer is already valid and just\ninherits it if so.\n\nSigned-off-by: Oliver Smith-Denny <osde@microsoft.com>",
"is_bot": false,
"headline": "AdvLoggerPkg: PeilessArm: Check if Buffer Is Already Valid",
"author_name": "Oliver Smith-Denny",
"author_login": "os-d",
"committed_at": "2026-06-26T15:07:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e565ad2f9468dcdfe3f1974787c03ce240f12ada",
"body": "Update the local PeiMain.h to not use the private\nheader and instead use a VOID * for the type that\nwas pulled from the private header.\n\nConsume this in the PeiCore instance of\nAdvLoggerLib.\n\nSigned-off-by: Oliver Smith-Denny <osde@microsoft.com>",
"is_bot": false,
"headline": "AdvLoggerPkg: PeiCore Instance: Use Local PeiMain.h",
"author_name": "Oliver Smith-Denny",
"author_login": "os-d",
"committed_at": "2026-06-26T14:14:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c07062a46736b4d5085cb8acff668d78e9db2eeb",
"body": "This is a direct copy of PeiMain.h to be amended in\na future commit.\n\nSigned-off-by: Oliver Smith-Denny <osde@microsoft.com>",
"is_bot": false,
"headline": "AdvancedLoggerPkg: Pei Core Instance: Copy PeiMain.h",
"author_name": "Oliver Smith-Denny",
"author_login": "os-d",
"committed_at": "2026-06-26T14:14:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "38867aa20d4a395855fd99e5389be5331d996442",
"body": "synced local file(s) with\n[microsoft/mu_devops](https://github.com/microsoft/mu_devops).\n\n🤖: View the [Repo File Sync Configuration\nFile](https://github.com/microsoft/mu_devops/blob/main/.sync/Files.yml)\nto see how files are synced.\n\n---\n\nThis PR was created automatically by the\n[repo-file-sync-acti\n[…]\ncom/microsoft/mu_devops/actions/runs/28162500804)\n\nSigned-off-by: Project Mu UEFI Bot <uefibot@microsoft.com>\nCo-authored-by: mu-automation[bot] <204385837+mu-automation[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Repo File Sync: Bump actions/cache from 5 to 6 (#904)",
"author_name": "mu-automation[bot]",
"author_login": "mu-automation[bot]",
"committed_at": "2026-06-25T17:23:51Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "32f552c0c6307bc21a33f8a5f78e3e2e0fa1026f",
"body": "patina 22.1.0 moved its r-efi dependency up to version 7, but the\nworkspace was still pinned to ^6.\n\nCargo then pulled in both r-efi 6 and 7 at the same time, and since\ntypes from different major versions don't unify, that broke\n`cargo make check` and `cargo make test`.\n\nThis moves the workspace to r-efi 7.\n\nSigned-off-by: Michael Kubacki <michael.kubacki@microsoft.com>",
"is_bot": false,
"headline": "Bump r-efi to 7 to match patina's update",
"author_name": "Michael Kubacki",
"author_login": "makubacki",
"committed_at": "2026-06-25T14:36:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce9f612b86454f2f42e9358f23a1c26dffa59cad",
"body": "Library crates are currently being listed in the `members` section, so\nthe line about binary crates is removed.\n\nRustAdvancedLoggerDxe is currently being built as a dependency, but\nthis commit adds it as a member for consistency with other crates.\n\nSigned-off-by: Michael Kubacki <michael.kubacki@microsoft.com>",
"is_bot": false,
"headline": "Cargo.toml: Add AdvLoggerPkg/Crates/RustAdvancedLoggerDxe as a member",
"author_name": "Michael Kubacki",
"author_login": "makubacki",
"committed_at": "2026-06-25T14:36:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bfc78cc0e70a9e42645195f2e712ee181404605f",
"body": "Makes the remaining changes needed in UefiHidDxeV2 to use\npatina::function instead of mu_rust_helpers::function so the\ncrate dependency can be removed from the workspace.\n\nSigned-off-by: Michael Kubacki <michael.kubacki@microsoft.com>",
"is_bot": false,
"headline": "Remove mu_rust_helpers as a workspace dependency",
"author_name": "Michael Kubacki",
"author_login": "makubacki",
"committed_at": "2026-06-24T16:43:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f765e94b3ab173ded386e64aa649f5355bea9fda",
"body": "Makes the remaining changes needed to replace mu_rust_helpers with\nthe patina crate. This is part of the effort to remove mu_rust_helpers\nas it is being deprecated.\n\nSigned-off-by: Michael Kubacki <michael.kubacki@microsoft.com>",
"is_bot": false,
"headline": "MsWheaPkg: Remove mu_rust_helpers dependency",
"author_name": "Michael Kubacki",
"author_login": "makubacki",
"committed_at": "2026-06-24T16:43:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e4eb227a6cca8c263fa3333217916757daa3ff92",
"body": "Replaces the mu_pi status code types and error-code constants with the\nequivalent definitions from the patina crate (`patina::pi::status_code`\nand `patina::pi::protocols::status_code`).\n\nThis removes the mu_pi dependency from the crate and the workspace.\n\nSigned-off-by: Michael Kubacki <michael.kubacki@microsoft.com>",
"is_bot": false,
"headline": "MuTelemetryHelperLib: Use patina instead of mu_pi",
"author_name": "Michael Kubacki",
"author_login": "makubacki",
"committed_at": "2026-06-24T16:43:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1dcebc050ede2ee98babb1e41a304c1991d4d335",
"body": "mu_rust_helpers re-exports mu_uefi_guid, which updated to r-efi v7.\n\nIts `guid::ZERO` and `guid::CALLER_ID` constants are compiled against\nr-efi v7, while patina (and the rest of the tree) remain on r-efi v6,\nproducing mismatched-type errors when those constants are used in v6\ncontexts.\n\nThis makes \n[…]\nCALLER_ID` constants are compiled against r-efi\nv6.\n\nThis is also a step toward removing the mu_rust_helpers dependency\nfrom this crate.\n\nSigned-off-by: Michael Kubacki <michael.kubacki@microsoft.com>",
"is_bot": false,
"headline": "MuTelemetryHelperLib: Fix r-efi v7 GUID constant conflict",
"author_name": "Michael Kubacki",
"author_login": "makubacki",
"committed_at": "2026-06-24T16:43:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cea5d2a4121c36a36eb2a4038f31f8aa3e06232f",
"body": "## Description\n\n`AdvancedLoggerWrite` unconditionally wrote debug output to the hardware\nserial\nport at both boot time and OS runtime (after ExitBootServices). Some\nplatforms'\nserial implementations cannot be safely called at OS runtime.\n\nThis change adds an **opt-in** FeatureFlag PCD\n`PcdAdvancedLo\n[…]\nentation cannot\nbe\ncalled safely at OS runtime should set\n`gAdvLoggerPkgTokenSpaceGuid.PcdAdvancedLoggerHdwPortRuntimeDisable` to\nTRUE.\n\n---------\n\nCo-authored-by: Kai Ching <Chao.Ching@microsoft.com>",
"is_bot": false,
"headline": "AdvLoggerPkg: Gate hardware port writes at OS runtime (#902)",
"author_name": "KaiJI",
"author_login": "chaokai-ching",
"committed_at": "2026-06-22T22:56:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9ee0678a2d63e6e940e4de6cdb65c82dba744d66",
"body": "Bumps the all-actions-dependencies group with 1 update:\n[actions/checkout](https://github.com/actions/checkout).\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "GitHub Action: Bump actions/checkout from 6 to 7 (#903)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-22T15:56:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d2b84121c038d8c298dba57c668d16acf0051181",
"body": "## Description\n\n`[Components.AARCH64, Components.AARCH64]` should just be\n`[Components.AARCH64]` in `MsCorePkg.dsc`.\n\n- [ ] Impacts functionality?\n- [ ] Impacts security?\n- [ ] Breaking change?\n- [ ] Includes tests?\n- [ ] Includes documentation?\n\n## How This Was Tested\n\n- Local MsCorePkg CI build\n\n## Integration Instructions\n\n- N/A\n\nSigned-off-by: Michael Kubacki <michael.kubacki@microsoft.com>",
"is_bot": false,
"headline": "MsCorePkg: Fix double components specifier for AARCH64 (#901)",
"author_name": "Michael Kubacki",
"author_login": "makubacki",
"committed_at": "2026-06-17T17:31:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "999f4438675567b54ee48ef9480c6cfb7e767caf",
"body": null,
"is_bot": false,
"headline": ".azurepipelines: Add CLANGPDB CI",
"author_name": "Joey Vagedes",
"author_login": "Javagedes",
"committed_at": "2026-06-17T16:35:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8dbc6b2fc62a1751b5f76ae9cc2f52f59d1996ea",
"body": "Specify CLANGPDB build flags so that GCC build flags are not applied to\nthe CLANGPDB build",
"is_bot": false,
"headline": "AdvLoggerPkg: AdvLoggerOsConnectorPrm: Fix CLANGPDB build flags",
"author_name": "Joey Vagedes",
"author_login": "Javagedes",
"committed_at": "2026-06-17T16:35:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3a028fc02ae48496546ecb6884c0cda3eeaaac37",
"body": "This commit adds the CONST qualifier to the CHAR8\nstrings to prevent memcpy from being used to copy the strings around.",
"is_bot": false,
"headline": "XmlSupportPkg: XmlTreeLib Unit Tests: Prevent memcpy usage",
"author_name": "Joey Vagedes",
"author_login": "Javagedes",
"committed_at": "2026-06-17T16:35:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "befd72c9cb61efd490982b8417915ce527c8ea2b",
"body": "Any io the error handling conditions that cause a\ngoto `Done` will call `if (Blt != NULL)` even\nthough Blt may not have been initialized. This\ncommit sets Blt to null at the beggining of the\nfunction to resolve this.",
"is_bot": false,
"headline": "MsGraphicsPkg: BmpDisplay: Set Blt to NULL early",
"author_name": "Joey Vagedes",
"author_login": "Javagedes",
"committed_at": "2026-06-17T16:35:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "74955ad1b4daab5fb7ba87665dfd3ba1faf57e31",
"body": "synced local file(s) with\n[microsoft/mu_devops](https://github.com/microsoft/mu_devops).\n\n🤖: View the [Repo File Sync Configuration\nFile](https://github.com/microsoft/mu_devops/blob/main/.sync/Files.yml)\nto see how files are synced.\n\n---\n\nThis PR was created automatically by the\n[repo-file-sync-acti\n[…]\ncom/microsoft/mu_devops/actions/runs/27682808213)\n\nSigned-off-by: Project Mu UEFI Bot <uefibot@microsoft.com>\nCo-authored-by: mu-automation[bot] <204385837+mu-automation[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Repo File Sync: Update --timings arg for Cargo 1.94+ (#898)",
"author_name": "mu-automation[bot]",
"author_login": "mu-automation[bot]",
"committed_at": "2026-06-17T15:00:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "038be7015e810c8d7d9cea2a5522a92b87d0a6fb",
"body": "Co-authored-by: Kancy Joe <kancy2333@outlook.com>\nSigned-off-by: XiaoYeZi <2838632319@qq.com>",
"is_bot": false,
"headline": "MsCorePkg: Remove the non-existent header files in aarch64",
"author_name": "XiaoYeZi",
"author_login": "qaz6750",
"committed_at": "2026-06-17T13:34:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6dca0d322401321682fce073dfa62076c1032a0f",
"body": "## Description\n\nThese workflow files were previously using a dedicated branch for\ndevelopment of the Mu PR Validation workflow. It has been stable for a\ncouple of months now, so we can switch back to using the main branch\nwhich has the latest changes.\n\n- [ ] Impacts functionality?\n- [ ] Impacts secu\n[…]\nare branch content (`main` <-> `add_mu_pr_val_workflow_e2e_val`)\n\n## Integration Instructions\n\n- N/A. Only affects GitHub repo workflow.\n\nSigned-off-by: Michael Kubacki <michael.kubacki@microsoft.com>",
"is_bot": false,
"headline": ".github: Switch Mu PR Validation workflow to main branch (#897)",
"author_name": "Michael Kubacki",
"author_login": "makubacki",
"committed_at": "2026-06-16T18:34:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e14ec87f0e2d4d0fae5f3ec7f8f43d906196fa04",
"body": "synced local file(s) with\n[microsoft/mu_devops](https://github.com/microsoft/mu_devops).\n\nSigned-off-by: Project Mu UEFI Bot <uefibot@microsoft.com>\nCo-authored-by: mu-automation[bot] <204385837+mu-automation[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Repo File Sync: update mu_devops to v18.0.7 (#894)",
"author_name": "mu-automation[bot]",
"author_login": "mu-automation[bot]",
"committed_at": "2026-06-15T15:52:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f7c042a9d1428cdf6be773e2b8ca6cf51f66cb6f",
"body": "## Description\n\nThe WHEA UEFI shell test currently can take up to 16 minutes to run for\nAArch64 platforms. 2 main reasons are:\n1. The system does not support variable cache, which requires\nenvironment switching for each variable query;\n2. Each WHEA tests will invoke a variable sweep cleanup, that sp\n[…]\n\n\n## How This Was Tested\n\nThis test is run on ARM virt platform and confirmed only 2 full cleanups\nand shortened to local runs to < 2min. All tests are still passing.\n\n## Integration Instructions\n\nN/A",
"is_bot": false,
"headline": "Optimize WHEA UEFI shell test (#893)",
"author_name": "kuqin12",
"author_login": "kuqin12",
"committed_at": "2026-06-08T18:28:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f72b73c5f702753b8f44ed565d397b9b1814e150",
"body": "## Description\n\nThis PR consumed the major branch changes done in Patina as part of\nR-EFI 6.0 migration(release as version 22).\n\n- [ ] Impacts functionality?\n- [ ] Impacts security?\n- [ ] Breaking change?\n- [ ] Includes tests?\n- [ ] Includes documentation?\n\n## How This Was Tested\n\n`cargo make all`\n\n## Integration Instructions\n\nWill merge this once\nhttps://github.com/OpenDevicePartnership/patina/pull/1548 is merged and\npatina release 22 is made.",
"is_bot": false,
"headline": "Migrate to R-EFI 6.0 (#892)",
"author_name": "Vineel Kovvuri[MSFT]",
"author_login": "vineelko",
"committed_at": "2026-06-06T04:20:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "54e5632a2996ac165dac70198d6159aec6bbdf16",
"body": "## Description\n\nImplement keyboard repeat for held keys, matching the behavior of the\nlegacy C HidKeyboardDxe driver:\n\n- 500ms initial delay before repeat begins\n- 20ms repeat rate (~50 keys/sec) while key is held\n- Modifier keys, toggle keys, and non-spacing (dead) keys are excluded\n- Last newly pr\n[…]\n\nIncluded unit tests, tested on hardware at UEFI shell and confirmed\nexpected repeat behavior.\n\n## Integration Instructions\n\nNone.\n\nCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>",
"is_bot": false,
"headline": "UefiHidDxeV2: Add keystroke repeat functionality (#883)",
"author_name": "John Schock",
"author_login": "joschock",
"committed_at": "2026-05-14T16:43:43Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "153d5cb831e6ebe775a40d87a9e9ef3d5d719af3",
"body": "… group (#889)\n\nBumps the all-pip-dependencies group with 1 update:\n[regex](https://github.com/mrabarnett/mrab-regex).\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "pip: bump regex from 2026.4.4 to 2026.5.9 in the all-pip-dependencies…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-13T15:49:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3e0556b035c931eecdfaccfda022edbc96068592",
"body": "## Description\n\nAdded the missing UefiLib library class dependency to\nMfciPolicyParsingUnitTestApp.inf. The module uses UefiLib APIs but did\nnot declare the dependency in its [LibraryClasses] section, causing\nbuild failures when the library was not implicitly pulled in by the\nplatform DSC.\nThe modul\n[…]\ntApp.inf\nand confirmed the build completes without missing library errors.\n\n ## Integration Instructions\n\nN/A — consumers of MfciPkg do not need any changes; this only affects\nthe unit test app build.",
"is_bot": false,
"headline": "Fix missing UefiLib dependency in MfciPolicyParsingUnitTestApp (#887)",
"author_name": "GiriMohanNaidu",
"author_login": "GiriMohanNaidu",
"committed_at": "2026-05-12T18:33:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "24954e4ea6e1b2994954f5bf993a266dddc33f46",
"body": "## Description\n\nGopRegisteredCallback sets mGop when it finds GOP but exits early if SRE\nis not available yet. Because mGop remains set, the callback never\nretries on subsequent GOP notifications, so SWM never initializes.\n\nReset mGop to NULL when SRE is not found so the callback can retry.\n\n- [X] I\n[…]\nbecomes available\n - Confirmed Front Page and on-screen keyboard render correctly\n- Verified no regression when GOP and SRE appear simultaneously\n(standard boot path)\n\n## Integration Instructions\n\nN/A",
"is_bot": false,
"headline": "Fix SWM init retry when SRE is not ready (#888)",
"author_name": "Armando Ferreira",
"author_login": "mikitl",
"committed_at": "2026-05-12T17:56:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "186583ff78928f79983e96c89dc209f9ae962a7d",
"body": "… by earlier firmware phase (#886)",
"is_bot": false,
"headline": "AdvancedLoggerPkg/MmCoreArm: Initialize LoggerInfo if not already set…",
"author_name": "Sureshkumar Ponnusamy",
"author_login": "sureshkumarpMSFT",
"committed_at": "2026-05-10T16:28:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4b08ed02ed6196244f8009d91fea7f982bbf3aba",
"body": "synced local file(s) with\n[microsoft/mu_devops](https://github.com/microsoft/mu_devops).\n\nSigned-off-by: Project Mu UEFI Bot <uefibot@microsoft.com>\nCo-authored-by: mu-automation[bot] <204385837+mu-automation[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Repo File Sync: Update mu_devops to v18.0.6 (#884)",
"author_name": "mu-automation[bot]",
"author_login": "mu-automation[bot]",
"committed_at": "2026-05-05T15:17:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1d68de818cb6a4d2744f44965c79d9daebd315d0",
"body": "## Description\n\n- `mu_uefi_boot_services` is not maintained and its functionality is\nmoved into patina.\n- The [mu_uefi_boot_services's\ncrates.io](https://crates.io/crates/mu_uefi_boot_services) point to\nnon-existent repo.\n- This cleanup is needed to move mu_plus's r-efi dependency to 6.0\n\nNext, Once\n[…]\ns Was Tested\n\n`cargo make all` worked. Will be tested in internal repos once r-efi 6.0\nmigration is done.\n\n## Integration Instructions\n\nNA\n\nSigned-off-by: Vineel Kovvuri[MSFT] <vineelko@microsoft.com>",
"is_bot": false,
"headline": "Migrate mu_plus from mu_uefi_boot_services crate to patina crate (#881)",
"author_name": "Vineel Kovvuri[MSFT]",
"author_login": "vineelko",
"committed_at": "2026-04-29T21:57:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1d1b4dbb468755c8a3e7558701b60b6e41a88b09",
"body": "…ilable (#876)\n\n## Description\n\nIn the course of testing advanced logger changes with edk2 Standalone MM\non OVMF, there was a change needed in MmPlatformHobProducerLibOvmf in\nOvmfPkg to account for gAdvancedLoggerHobGuid in the HOBs that are\npassed to the MM environment.\n\nPrior to this change, the s\n[…]\n\n\n## How This Was Tested\n\n- Test MM entry with and without `gAdvancedLoggerHobGuid` in the HOB\nlist.\n\n## Integration Instructions\n\n- N/A\n\nSigned-off-by: Michael Kubacki <michael.kubacki@microsoft.com>",
"is_bot": false,
"headline": "AdvLoggerPkg/AdvancedLoggerLib: Print to HW if logger info is not ava…",
"author_name": "Michael Kubacki",
"author_login": "makubacki",
"committed_at": "2026-04-29T21:19:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2dd94f4d928bc3ecf3341744c55c75a525d2dc14",
"body": "## Description\n\nHelloWorldRustDxe Component is currently being compiled for 32 bit\ncausing PR gates to fail when dependent Rust packages do not compile(by\ndesign) for 32 bit. This PR deletes it completely.\n\n---\n- [ ] Impacts functionality?\n- [ ] Impacts security?\n- [x] Breaking change?\n- [ ] Includes tests?\n- [ ] Includes documentation?\n\n## How This Was Tested\n\n`cargo make all`\n\n## Integration Instructions\n\nNA\n\nSigned-off-by: Vineel Kovvuri[MSFT] <vineelko@microsoft.com>",
"is_bot": false,
"headline": "Delete HelloWorldRustDxe Component (#882)",
"author_name": "Vineel Kovvuri[MSFT]",
"author_login": "vineelko",
"committed_at": "2026-04-29T14:47:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4eda6c80483eff69b6073a82c052fcba87209184",
"body": "…13 (#880)\n\nsynced local file(s) with\n[microsoft/mu_devops](https://github.com/microsoft/mu_devops).\n\nSigned-off-by: Project Mu UEFI Bot <uefibot@microsoft.com>\nCo-authored-by: mu-automation[bot] <204385837+mu-automation[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Repo File Sync: Update robinraju/release-downloader from v1.12 to v1.…",
"author_name": "mu-automation[bot]",
"author_login": "mu-automation[bot]",
"committed_at": "2026-04-28T18:26:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "db8020fb9ac9b4df3f114e63bac5895dd08f90c9",
"body": "## Description\n\nEffectively reverts commits af0f64c and 9fc8521 preserving structure\ncompatibility and general cleanup.\n\nThe advanced logger buffer starts accumulating messages in the first\nphase advanced logger is active, and the buffer continues to be used\nthroughout remaining phases. Each phase h\n[…]\nLoggerPkg CI\n- Boot to OS on QEMU Q35 and SBSA\n- Boot to EFI shell on OVMF X64 w/ edk2 Standalone MM\n\n## Integration Instructions\n\n- N/A\n\nSigned-off-by: Michael Kubacki <michael.kubacki@microsoft.com>",
"is_bot": false,
"headline": "AdvLoggerPkg: Drop buffer migration (#868)",
"author_name": "Michael Kubacki",
"author_login": "makubacki",
"committed_at": "2026-04-18T01:57:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "87ab47ee2419f58b3064670b12417d682fdfeb2e",
"body": "Bumps the all-pip-dependencies group with 1 update:\n[pygount](https://github.com/roskakori/pygount).\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "pip: bump pygount from 3.1.1 to 3.2.0 (#875)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-15T19:09:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "15783cce5448509ae07c3297fb95e8537e2681d1",
"body": "…-script 9 (#873)\n\nBumps the all-actions-dependencies group with 1 update in the /\ndirectory:\n[actions/github-script](https://github.com/actions/github-script).\n\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "GitHub Action: Update mu-pr-validation workflow to use actions/github…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-15T15:40:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "171671472f2acba3a3a048a14f6422394a12346d",
"body": "… actions/github-script@v9 (#874)\n\nsynced local file(s) with\n[microsoft/mu_devops](https://github.com/microsoft/mu_devops).\n\nSigned-off-by: Project Mu UEFI Bot <uefibot@microsoft.com>\nCo-authored-by: mu-automation[bot] <204385837+mu-automation[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Repo File Sync: Update Pr Validation from actions/github-script@v8 to…",
"author_name": "mu-automation[bot]",
"author_login": "mu-automation[bot]",
"committed_at": "2026-04-14T18:21:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "10b70da63d8d6e219039a8675d3bc2c2473fe127",
"body": "Bumps the all-pip-dependencies group with 2 updates:\n[edk2-pytool-library](https://github.com/tianocore/edk2-pytool-library)\nand [regex](https://github.com/mrabarnett/mrab-regex).\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "pip: bump edk2-pytool-library to 0.23.13, regex to 2026.4.4 (#867)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-13T17:38:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "090bb16400e506d47865cafe75639d385a81f9ab",
"body": "## Description\n\nBecause mu-pr-validation.yml is in the default branch (release/202511)\nand runs on a workflow_run trigger for the CodeQL workflow where the\nCodeQL workflow runs for all release branches, the Mu PR Validation\nworkflow will run for all PRs targeting any release branch.\n\nBecause mu_tian\n[…]\nion?\n\n## How This Was Tested\n\nVerified for PRs against the default on non-default branch on my fork.\n\n## Integration Instructions\n\n- N/A\n\nSigned-off-by: Michael Kubacki <michael.kubacki@microsoft.com>",
"is_bot": false,
"headline": "Skip Mu PR validation for PRs targeting non-default branches (#872)",
"author_name": "Michael Kubacki",
"author_login": "makubacki",
"committed_at": "2026-04-09T14:53:26Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fb02a76d1c132e51b58661547f53b83cc9ce06e4",
"body": "…s (#866)\n\n## Description\n\nMoves the `ShowKeyboard()` call after the canvas `Draw()` call in the\n`KEYFOCUS` handling block of PasswordDialog and SemmUserAuthDialog.\n\nPreviously, the on-screen keyboard was displayed before the dialog\nfinished rendering at its shifted position.\n\nBy deferring `ShowKeyb\n[…]\non the screen\n3. Watch the on-screen keyboard load\n\n## Integration Instructions\n\n- N/A\n\nSigned-off-by: Michael Kubacki <michael.kubacki@microsoft.com>\nCo-authored-by: Wenbo Hou <wenbhou@microsoft.com>",
"is_bot": false,
"headline": "MsGraphicsPkg/SwmDialogsLib: Show OSK after dialog rendering complete…",
"author_name": "Michael Kubacki",
"author_login": "makubacki",
"committed_at": "2026-04-09T01:42:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f3a8e88f6424a6815f1feedd4c71cd9362f10095",
"body": "…es (#870)\n\n## Description\n\nThe Mu Automation GitHub app requires a permission update to be accepted\nby a microsoft org admin. Until that happens, disable the calling the\nGitHub API to update the commit status.\n\nThis will still run validation and post PR comments. The pass/fail\nresult just won't be \n[…]\n Breaking change?\n- [ ] Includes tests?\n- [ ] Includes documentation?\n\n## How This Was Tested\n\n- N/A\n\n## Integration Instructions\n\n- N/A\n\nSigned-off-by: Michael Kubacki <michael.kubacki@microsoft.com>",
"is_bot": false,
"headline": "mu-pr-validation-pending.yml: Temporarily disable commit status updat…",
"author_name": "Michael Kubacki",
"author_login": "makubacki",
"committed_at": "2026-04-08T21:22:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7c8cc88e448c63c069a5768149264d63352d65aa",
"body": "## Description\n\nAdds workflows to run QEMU-based platform validation on pull requests to\nmu_plus. This includes:\n\n- `mu-pr-validation.yml`: The main workflow that performs the actual\nQEMU validation, including building and booting.\n\n- `mu-pr-validation-pending.yml`: A workflow that posts an immediat\n[…]\nrovide the ability to\nget a relative sense of perf impact.\n\n## Integration Instructions\n\n- N/A - Only impacts PR validation in this repo\n\nSigned-off-by: Michael Kubacki <michael.kubacki@microsoft.com>",
"is_bot": false,
"headline": ".github: Add Mu PR Validation workflow (#865)",
"author_name": "Michael Kubacki",
"author_login": "makubacki",
"committed_at": "2026-04-08T16:44:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1931cff27b88197a0578d962b11e2fddb846bf6d",
"body": "synced local file(s) with\n[microsoft/mu_devops](https://github.com/microsoft/mu_devops).\n\n🤖: View the [Repo File Sync Configuration\nFile](https://github.com/microsoft/mu_devops/blob/main/.sync/Files.yml)\nto see how files are synced.\n\n\n\n---\n\nThis PR was created automatically by the\n[repo-file-sync-ac\n[…]\ncom/microsoft/mu_devops/actions/runs/24037768367)\n\nSigned-off-by: Project Mu UEFI Bot <uefibot@microsoft.com>\nCo-authored-by: mu-automation[bot] <204385837+mu-automation[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Repo File Sync: pull-request-validator: update comment if exists (#862)",
"author_name": "mu-automation[bot]",
"author_login": "mu-automation[bot]",
"committed_at": "2026-04-06T17:14:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "31f2b85ddb606cf6e4b4019ec2db1349d97b162b",
"body": "Consume the new FltUsedLib in MsCorePkg instead of\nMdePkg.\n\nSigned-off-by: Oliver Smith-Denny <osde@microsoft.com>",
"is_bot": false,
"headline": "MsGraphicsPkg: Consume FltUsedLib from MsCorePkg",
"author_name": "Oliver Smith-Denny",
"author_login": "os-d",
"committed_at": "2026-04-01T22:44:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "afd7b81b2da41b4d0b9e95df43253190dcabc168",
"body": "MfciPkg.dsc doesn't build any components that\nuse FltUsedLib. Drop the references.\n\nSigned-off-by: Oliver Smith-Denny <osde@microsoft.com>",
"is_bot": false,
"headline": "MfciPkg: Remove FltUsedLib References",
"author_name": "Oliver Smith-Denny",
"author_login": "os-d",
"committed_at": "2026-04-01T22:44:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e5d25e42d54d0756bba2c6442fba10706c268213",
"body": "This migrates FltUsedLib from MdePkg to MsCorePkg, as it is\nonly used in mu_plus. It defines a global variable that MSVC\nand clang expect when floating point is used.\n\nSigned-off-by: Oliver Smith-Denny <osde@microsoft.com>",
"is_bot": false,
"headline": "MsCorePkg: Add FltUsedLib",
"author_name": "Oliver Smith-Denny",
"author_login": "os-d",
"committed_at": "2026-04-01T22:44:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0180dfe470189f760311e093c18904fcb016aca9",
"body": "…861)\n\nBumps the all-pip-dependencies group with 3 updates:\n[edk2-pytool-library](https://github.com/tianocore/edk2-pytool-library),\n[edk2-pytool-extensions](https://github.com/tianocore/edk2-pytool-extensions)\nand [regex](https://github.com/mrabarnett/mrab-regex).\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "pip: bump the edk2-pytool-library, edk2-pytool-extension and regex (#…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-04-01T15:08:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "151062aa9ac34e175a907d397db2c3f290f2a711",
"body": "synced local file(s) with\n[microsoft/mu_devops](https://github.com/microsoft/mu_devops).\n\n🤖: View the [Repo File Sync Configuration\nFile](https://github.com/microsoft/mu_devops/blob/main/.sync/Files.yml)\nto see how files are synced.\n\n---\n\nThis PR was created automatically by the\n[repo-file-sync-acti\n[…]\ncom/microsoft/mu_devops/actions/runs/23790191658)\n\nSigned-off-by: Project Mu UEFI Bot <uefibot@microsoft.com>\nCo-authored-by: mu-automation[bot] <204385837+mu-automation[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Repo File Sync: Update to Mu DevOps v18.0.4 (#860)",
"author_name": "mu-automation[bot]",
"author_login": "mu-automation[bot]",
"committed_at": "2026-03-31T15:02:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "edd0b6f3f8af5306d7f667bda142232457d2443b",
"body": "## Description\n\nThe switch from dev/release to just relase left the backport workflow in\nthe repo. Though it will\nnot be triggered, dependabot will continue\nto attempt to update the github actions used.\n\nRemove the workflow to reduce unused workflows and to prevent dependabot\nfrom attempting to update.\n\n- [ ] Impacts functionality?\n- [ ] Impacts security?\n- [ ] Breaking change?\n- [ ] Includes tests?\n- [ ] Includes documentation?\n\n## How This Was Tested\nN/A\n\n## Integration Instructions\nN/A",
"is_bot": false,
"headline": "Global: Remove backport workflow. (#859)",
"author_name": "Aaron",
"author_login": "apop5",
"committed_at": "2026-03-25T18:23:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f5b19d427ebdf4de9456f86df27b2bd7570507cd",
"body": "## Description\n\nMake the MpManagement FunctionalTest compile with clangpdb.\n\nCorrect some uninitialized variable paths, and use macros for \nloading variables it registers in assembly. \n\n- [ ] Impacts functionality?\n- [ ] Impacts security?\n- [ ] Breaking change?\n- [ ] Includes tests?\n- [ ] Includes documentation?\n\n## How This Was Tested\nClangPdb Build.\n\n## Integration Instructions\nNo integration necessary.\n\nCo-authored-by: Oliver Smith-Denny <Oliver.SmithDenny@microsoft.com>",
"is_bot": false,
"headline": "UefiTestingPkg: MpManagement clangpdb compatibility (#858)",
"author_name": "Aaron",
"author_login": "apop5",
"committed_at": "2026-03-23T19:37:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c79571da5016d0b556c9d0d197c0b7f24fc61a74",
"body": "In mu_basecore commit 5ba3221588832c47249a6db1f38b490f034e07ca\nthe X86 Page Table definitions were moved from CpuPageTableLib\nto MdePkg. Consume these from the new location and define a\nmacro that remained in the private header in edk2.\n\nSigned-off-by: Oliver Smith-Denny <osde@microsoft.com>",
"is_bot": false,
"headline": "UefiTestingPkg: FlatPageTableLib: Include Public Page Table Defs",
"author_name": "Oliver Smith-Denny",
"author_login": "os-d",
"committed_at": "2026-03-18T17:34:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fe3847e1447ce1a6e91ce96a256ddc0513c5e6d8",
"body": "…token@v3 (#855)\n\nsynced local file(s) with\n[microsoft/mu_devops](https://github.com/microsoft/mu_devops).\n\n🤖: View the [Repo File Sync Configuration\nFile](https://github.com/microsoft/mu_devops/blob/main/.sync/Files.yml)\nto see how files are synced.\n\n\n\n---\n\nThis PR was created automatically by the\n\n[…]\ncom/microsoft/mu_devops/actions/runs/23170828584)\n\nSigned-off-by: Project Mu UEFI Bot <uefibot@microsoft.com>\nCo-authored-by: mu-automation[bot] <204385837+mu-automation[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Repo File Sync: Group Dependabot Prs and update to create-github-app-…",
"author_name": "mu-automation[bot]",
"author_login": "mu-automation[bot]",
"committed_at": "2026-03-17T01:34:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "991596712aef47913591e6bca3820eb472397a71",
"body": "synced local file(s) with\n[microsoft/mu_devops](https://github.com/microsoft/mu_devops).\n\n🤖: View the [Repo File Sync Configuration\nFile](https://github.com/microsoft/mu_devops/blob/main/.sync/Files.yml)\nto see how files are synced.\n\n\n\n---\n\nThis PR was created automatically by the\n[repo-file-sync-ac\n[…]\ncom/microsoft/mu_devops/actions/runs/23136626096)\n\nSigned-off-by: Project Mu UEFI Bot <uefibot@microsoft.com>\nCo-authored-by: mu-automation[bot] <204385837+mu-automation[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Repo File Sync: Add extra_steps parameter to MuDevOpsWrapper.yml (#853)",
"author_name": "mu-automation[bot]",
"author_login": "mu-automation[bot]",
"committed_at": "2026-03-16T17:26:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fe590c113ebb303bb09c1f247c326e180d62cfe5",
"body": null,
"is_bot": false,
"headline": "Replace memcpy with CopyGuid.",
"author_name": "Jay Krell",
"author_login": "jaykrell",
"committed_at": "2026-03-11T13:10:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "92e607e80cd76f3a89e1755951792c4b2ca209fb",
"body": "… (#850)\n\n## Description\nWhen MemoryAttributeProtocolFuncTestApp executes, it leaves some regions\nof memory as RWX.\n\nThe ordering of test applications in mu_tiano_platforms is not fixed.\nDifferent environments can result in a different run order.\n\nWith the memory regions left as RWX, if DxePagingAud\n[…]\ncts security?\n- [ ] Breaking change?\n- [x] Includes tests?\n- [ ] Includes documentation?\n\n## How This Was Tested\nLocal Build and Test on Q35/Sbsa\n\n## Integration Instructions\nNo integration necessary.",
"is_bot": false,
"headline": "UefiTestingPkg\\MemoryAttributeProtocolFuncTestApp restore attributes.…",
"author_name": "Aaron",
"author_login": "apop5",
"committed_at": "2026-03-09T21:19:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c076534da49fb032c0e90fc98d66e959d774209b",
"body": "## Description\n\nIt has been observed on some platforms that SRESetMode() is invoked at a\nTPL greater than TPL_CALLBACK, which leads to TPL inversion when\nSRESetMode() unconditionally raises the TPL to TPL_CALLBACK.\n\nThe platform behavior seems reasonable given there are no apparent\ncaller restrictio\n[…]\nand SBSA boot to shell\n- Boot Intel physical platform that encountered TPL inversion with the\nchange\n\n## Integration Instructions\n\n- N/A\n\nSigned-off-by: Michael Kubacki <michael.kubacki@microsoft.com>",
"is_bot": false,
"headline": "[2511] MsGraphicsPkg: Prevent TPL inversion in SRESetMode() (#848)",
"author_name": "Michael Kubacki",
"author_login": "makubacki",
"committed_at": "2026-03-07T01:51:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bddda9a2292f1bb3820f21f8dcdd155353bbc9dd",
"body": "## Description\nReduce the amount of memory allocated. Originally test was allocating\n4096 pages of memory (16 MB) and changing attributes only the first\npage.\n\nRemove the reallocation test. With the upstream changes to leak memory\nif they do not have RW set when Free is called,\n\n(https://github.com/\n[…]\n Breaking change?\n- [ ] Includes tests?\n- [ ] Includes documentation?\n\n## How This Was Tested\nQemuQ35 202511 failing test before, passing after. \n\n## Integration Instructions\nNo Integration necessary.",
"is_bot": false,
"headline": "UefiTestingPkg/MemoryAttributeProtocolFuncTestApp (#849)",
"author_name": "Aaron",
"author_login": "apop5",
"committed_at": "2026-03-06T22:40:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "574dad703e279f74cca9cb211ad47aaf4e58f659",
"body": "Update FlatPageTableAarch64 to be able to deal with 5 level page tables.",
"is_bot": false,
"headline": "UefiTestingPkg: DxePagingAudit Update for AARCH64 5 level page tables",
"author_name": "apop5",
"author_login": "apop5",
"committed_at": "2026-03-05T01:31:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "38aed87d27877f80cdf8b47472c21e4053c1163c",
"body": "In running a test of SBSA 202511, the database string\nsize was too small, resulting in an assert.\n\nIncreased the size from 1k to 4k to allow passing and allow\nfuture headroom.",
"is_bot": false,
"headline": "UefiTestingPkg: PagingAudit increase database max string size.",
"author_name": "apop5",
"author_login": "apop5",
"committed_at": "2026-03-05T01:31:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5877ba7fcffcbc33917d76d42f0617ecd3761552",
"body": "Bumps [regex](https://github.com/mrabarnett/mrab-regex) from 2026.2.19\nto 2026.2.28.\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "pip: bump regex from 2026.2.19 to 2026.2.28 (#844)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-03-04T22:37:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f7e48e3229efe7ae0668c871d09468ff8b2bacb3",
"body": "Bumps\n[edk2-pytool-extensions](https://github.com/tianocore/edk2-pytool-extensions)\nfrom 0.30.6 to 0.30.8.\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "pip: bump edk2-pytool-extensions from 0.30.6 to 0.30.8 (#845)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-03-04T20:42:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7ef5517c736070bbed8146a80307c58a3c06b474",
"body": "synced local file(s) with\n[microsoft/mu_devops](https://github.com/microsoft/mu_devops).\n\nSigned-off-by: Project Mu UEFI Bot <uefibot@microsoft.com>\nCo-authored-by: mu-automation[bot] <204385837+mu-automation[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Repo File Sync: Bump actions/upload-artifact from 6 to 7 (#846)",
"author_name": "mu-automation[bot]",
"author_login": "mu-automation[bot]",
"committed_at": "2026-03-04T17:41:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8048024df723d11e6dd676f3181d7b5f5ebda469",
"body": "## Description\n\nRemove crate versioning for mockall from module level cargo.toml\n\n- [ ] Impacts functionality?\n- [ ] Impacts security?\n- [ ] Breaking change?\n- [ ] Includes tests?\n- [ ] Includes documentation?\n\n## How This Was Tested\n\nMoved the versioning to root level cargo.toml and cargo tests run fine.\n\n## Integration Instructions\n\nN/A",
"is_bot": false,
"headline": "Remove crate versioning from local cargo.toml (#834)",
"author_name": "srilatha sridharan",
"author_login": "srilathasridharan",
"committed_at": "2026-03-03T22:21:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9fc8521f1c8ca14cf3b7cbf2bacb91f8f1a93573",
"body": "…#833)\n\n## Description\n\n1. Adds a ReadyToLock handler to ensure that any buffer migration that\nmay not have occurred prior to that point happens at ReadyToLock.\n2. Aligns Traditional MM and Standalone MM code on the ReadyToLock\nboundary.\n3. Also ensures all calls to check for a new logger are gated \n[…]\nnd Standalone\nMM)\n- Dump log at EFI shell\n- Dump log uses the latest decode Python script in Windows\n\n## Integration Instructions\n\n- N/A\n\nSigned-off-by: Michael Kubacki <michael.kubacki@microsoft.com>",
"is_bot": false,
"headline": "AdvLoggerPkg: Check for migrated buffer on ReadyToLock notification (…",
"author_name": "Michael Kubacki",
"author_login": "makubacki",
"committed_at": "2026-03-03T22:21:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8e0aa39e63aefeff817c7272db4cf3e48db412a1",
"body": "…nterfaces (#831)\n\n## Description\n\nSwmDialogsDestructor calls UninstallMultipleProtocolInterfaces() which\ntakes a Null-terminated list of <guid, interface> pairs to uninstall.\nHowever, it fails to include the NULL terminator, which causes an\nattempt to uninstall stack garbage. This PR adds the NULL \n[…]\n ] Includes documentation?\n\n## How This Was Tested\n\nUnloaded a driver before/after the fix, observed that attempt to\nuninstall non-existent protocol no longer occurs.\n\n## Integration Instructions\n\nN/A",
"is_bot": false,
"headline": "SwmDialog: Fix missing NULL terminator for UninstallMultipleProtocolI…",
"author_name": "John Schock",
"author_login": "joschock",
"committed_at": "2026-03-03T22:21:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "452c5faafaeeb710ac91cc9d2564931d197f759b",
"body": "## Description\n\nLogger info structures are not zeroed and initialized right now, causing\ngarbage data to be read in some fields and impact test results.\n\n- [ ] Impacts functionality?\n- [ ] Impacts security?\n- [ ] Breaking change?\n- [ ] Includes tests?\n- [ ] Includes documentation?\n\n## How This Was Tested\n\n- Run LineParserTestApp on QEMU Q35\n\n## Integration Instructions\n\n- N/A\n\nSigned-off-by: Michael Kubacki <michael.kubacki@microsoft.com>",
"is_bot": false,
"headline": "AdvLoggerPkg: Initialize structures in LineParserTestApp (#828)",
"author_name": "Michael Kubacki",
"author_login": "makubacki",
"committed_at": "2026-03-03T22:21:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b8f1e8519cb157fcecb5b3f05158ad176bd37b0e",
"body": "This commit adds self map page table walking for X64 in the\nsimple paging audit test case. The logic was copied from\nCpuPageTableLib and self map logic added.\n\nSigned-off-by: Oliver Smith-Denny <osde@microsoft.com>",
"is_bot": false,
"headline": "UefiTestingPkg: PagingAudit: Add Self Map Page Table Walk for X64",
"author_name": "Oliver Smith-Denny",
"author_login": "os-d",
"committed_at": "2026-03-03T22:21:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a25b3609b7cc85e0a0aeffb4e0e7b0e042c97e4c",
"body": "This adds self mapped page table walking to the AARCH64 paging audit\ntest app.\n\nSigned-off-by: Oliver Smith-Denny <osde@microsoft.com>",
"is_bot": false,
"headline": "UefiTestingPkg: PagingAudit: Add Self Map Page Table Walk for AARCH64",
"author_name": "Oliver Smith-Denny",
"author_login": "os-d",
"committed_at": "2026-03-03T22:21:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c0bdfd2909bf905129104eae3d999ba94e61849c",
"body": "The DxeMemoryProtectionTestApp relies on a Project Mu produced\nprotocol to search images. However, this is not required for\nPatina and the debug image info table can be used instead.\n\nSigned-off-by: Oliver Smith-Denny <osde@microsoft.com>",
"is_bot": false,
"headline": "UefiTestingPkg: DxeMemoryProtectionTestApp: Add Patina Support",
"author_name": "Oliver Smith-Denny",
"author_login": "os-d",
"committed_at": "2026-03-03T22:21:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a4a108538bb1f6284594715181c0b01b3a24303a",
"body": "The Paging Audit Python script has a bad assumption\nthat the only RO Data should be the GDT/IDT. However,\nthis is incorrect for Patina, it marks any image section\nthat is not marked writeable as RO, so we will end up\nwith RO Data sections. This commit correctly reports\nthat instead of specifying an error.\n\nSigned-off-by: Oliver Smith-Denny <osde@microsoft.com>",
"is_bot": false,
"headline": "UefiTestingPkg: Paging Audit: Label RODATA Correctly",
"author_name": "Oliver Smith-Denny",
"author_login": "os-d",
"committed_at": "2026-03-03T22:21:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "883ef68a23f66fca790fc796c6930125b97eacbe",
"body": "There was a flawed test in the paging audit that tried to confirm\nthat memory outside of the EFI_MEMORY_MAP was marked as RP, but it\ndid not have all the information needed to determine this. The test\nwas removed from the simplified tests in the test app in\nhttps://github.com/microsoft/mu_plus/commit/5beccf1a8bab5468795fa18f5ce1233534f9b6a8\nbut it was not removed from the full paging audit. This\nremoves the test from the full audit.\n\nSigned-off-by: Oliver Smith-Denny <osde@microsoft.com>",
"is_bot": false,
"headline": "UefiTestingPkg: Paging Audit: Remove Memory Outside of MemoryMap Test",
"author_name": "Oliver Smith-Denny",
"author_login": "os-d",
"committed_at": "2026-03-03T22:21:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7f5d935eb5b05d7bfb2cb779501d377748c07637",
"body": "This adds support for running the paging audit on X64\nPatina systems. The only change required is adding\nself map parsing instead of physical page table map\nparsing.\n\nSigned-off-by: Oliver Smith-Denny <osde@microsoft.com>",
"is_bot": false,
"headline": "UefiTestingPkg: Paging Audit: Add Patina Support",
"author_name": "Oliver Smith-Denny",
"author_login": "os-d",
"committed_at": "2026-03-03T22:21:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "07a7c9a4410aaa46e57dc08fc9d9ef0d381f2054",
"body": "The Paging Audit has a bad call pattern for GetMemoryMap():\nit assumes that the unmerged memory map size is within 20%\nlarger than the merged memory map size (i.e. the first call\nto GetMemoryMap() with size 0 and the subsequent call).\n\nInstead, always use the unmerged size + 20% as the safe size\nto use. Otherwise we can fail because we say we have too small\na buffer.\n\nSigned-off-by: Oliver Smith-Denny <osde@microsoft.com>",
"is_bot": false,
"headline": "UefiTestingPkg: PagingAudit: Fix GetMemoryMap() Invocation",
"author_name": "Oliver Smith-Denny",
"author_login": "os-d",
"committed_at": "2026-03-03T22:21:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ea57b0edae45bea77ed74727daf309c903fb41ad",
"body": "Updates the major version to 6 to account for the `NewLoggerInfoAddress`\nfield that was added to `ADVANCED_LOGGER_INFO`.\n\nSigned-off-by: Michael Kubacki <michael.kubacki@microsoft.com>",
"is_bot": false,
"headline": "AdvLoggerPkg: Bump ADVANCED_LOGGER_INFO_VER to 6",
"author_name": "Michael Kubacki",
"author_login": "makubacki",
"committed_at": "2026-03-03T22:21:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "36a77e1471b091dfa4b69707ffa5e9c601fa39cc",
"body": "Currrently, ADVANCED_LOGGER_INFO_VER is being used to set and check\nthe version field in the ADVANCED_LOGGER_INFO struct.\n\nThis more clearly defines that version to be associated with the\nlog info structure and breaks out the Hardware Level version to a\nmacro (ADVANCED_LOGGER_INFO_HW_LVL_SUPPORTED_VER) that clearly shows\nthat is an identifier for hardware level support being present in\nthe logger info version.\n\nSigned-off-by: Michael Kubacki <michael.kubacki@microsoft.com>",
"is_bot": false,
"headline": "AdvLoggerPkg: Define a single advanced logger info version",
"author_name": "Michael Kubacki",
"author_login": "makubacki",
"committed_at": "2026-03-03T22:21:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8664b40d3d91c3db251c4adc1757f6c31914c4dd",
"body": "## Description\n\nWhen calling DecodeUefiLog, if the system was not able to provide a\nfrequency in the log, it will be reported as 0. With no verification\ncheck of a zero frequency, DecodeUefiLog would attempt a divide by zero\nwhen converting time to nano seconds.\n\nAdd a check that prevents divide by \n[…]\n where no timer frequency was reported,\nencountered a python exception.\nAfter change, log was correctly retrieved and displays a timestamp of 0.\n\n## Integration Instructions\n\nNo integration necessary.",
"is_bot": false,
"headline": "AdvLoggerPkg: DecodeUefiLog handle frequency errors. (#824)",
"author_name": "Aaron",
"author_login": "apop5",
"committed_at": "2026-03-03T22:21:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1517f860bc53f4ddcb7d23caf41b834ec7590b56",
"body": "## Description\n \nThis PR changes how CTRL-ALT-DEL resets are handled by the HID stack.\nPreviously, they were handled by the lower layer key processing code;\nbut this caused them to be handled at an implementation-defined TPL\nbased on what TPL the input reports are generated at by the HID I/O\nlayer.\n\n[…]\n [ ] Includes tests?\n- [ ] Includes documentation?\n\n## How This Was Tested\n\nVerified CTRL-ALT-DEL resets system from UEFI shell and that reset\noccurs at TPL_CALLBACK.\n\n## Integration Instructions\n\nN/A",
"is_bot": false,
"headline": "Refactor HID Keyboard Reset support (#823)",
"author_name": "John Schock",
"author_login": "joschock",
"committed_at": "2026-03-03T22:21:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8795585f447ea373acddbdedf1964574a841da14",
"body": "## Description\n\nCurrent log dumper application will add an HII entry to the database but\nnever removes it. This will cause the system to crash if we were to\ninvoke it again.\n\nThis change removes the added package before returning.\n\nFor details on how to complete these options and their meaning refer\n[…]\n change?\n- [ ] Includes tests?\n- [ ] Includes documentation?\n\n## How This Was Tested\n\nThis was tested on QEMU SBSA and double invoked the application without\nasserts.\n\n## Integration Instructions\n\nN/A",
"is_bot": false,
"headline": "AdvLoggerPkg: Remove added HII package before application returns (#822)",
"author_name": "kuqin12",
"author_login": "kuqin12",
"committed_at": "2026-03-03T22:21:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e28b06b255de15042d3a093e66ae0becc9457872",
"body": "## Description\n\nWhen using `MpManagement` to suspend all cores to a C-state that powers\ndown the core the non-secure watchdog is being used to wake up a core\nafter a certain amount of time.\n\nOn ARM reference platforms the non-secure watchdog interrupt is a level\ninterrupt and active high. and this P\n[…]\n use case was run:\n1. Program watchdog timer.\n2. Power down cores.\n3. Watchdog interrupt to wake up BSP.\n\n## Integration Instructions\n\nN/A\n\n---------\n\nCo-authored-by: rohansen <rohansen@microsoft.com>",
"is_bot": false,
"headline": "Configure watchdog interrupt for ARM platform (#820)",
"author_name": "rohansenUSA",
"author_login": "rohansenUSA",
"committed_at": "2026-03-03T22:21:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "32fa14759126ba7ee56d302e56c743d2d9854027",
"body": "## Description\n\nThe current debug output labels all `HwErrRec` entries as error records.\nWhile technically accurate given the “Hardware Error Record” naming,\nthis can be misleading, as some entries are informational rather than\nactual errors.\n\nThis change updates the debug output to use “telemetry r\n[…]\n?\n- [ ] Impacts security?\n- [ ] Breaking change?\n- [ ] Includes tests?\n- [ ] Includes documentation?\n\n## How This Was Tested\n\nDebug print change only, non-functional.\n\n## Integration Instructions\n\nN/A",
"is_bot": false,
"headline": "MsWheaPkg: Change debug prints to avoid confusion (#819)",
"author_name": "kuqin12",
"author_login": "kuqin12",
"committed_at": "2026-03-03T22:21:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7fddc4b6f748071d78b1414c71c99c5ade9c4843",
"body": "This reverts commit 8106b01d19f3d17a858b77e7acf7d5cd03058a15\nbecause it was squashed instead of merged.",
"is_bot": false,
"headline": "Revert \"[Rebase&FF] Lastest 202502 changes (#837)\"",
"author_name": "Aaron Pop",
"author_login": "apop5",
"committed_at": "2026-03-03T22:21:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab0d4d509366c71ab7b05b1546dcf117b5115a44",
"body": "## Description\n\nUpdates the checkered color bar math to display at most four rows of\ncheckers.\nPrevious implementation left a few pixels of a fifth row of checkers if\nSingleBannerHeight was not divisible by 4.\nThis commit also rearranges the color bars into color order.\n\n- [ ] Impacts functionality?\n[…]\ning change?\n- [ ] Includes tests?\n- [ ] Includes documentation?\n\n## How This Was Tested\n\nBooted with various color bars enabled, confirmed changes applied as\nexpected\n\n## Integration Instructions\n\nN/A",
"is_bot": false,
"headline": "MsGraphicsPkg: Limit checkered color bars to 4 rows (#841)",
"author_name": "Christopher Zurcher",
"author_login": "zurcher",
"committed_at": "2026-03-03T18:51:45Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8106b01d19f3d17a858b77e7acf7d5cd03058a15",
"body": "## Description\n\nBringing the rest of the changes from 202502 into 202511. These are\nstraight cherry-picks.\n\n- [ ] Impacts functionality?\n- [ ] Impacts security?\n- [ ] Breaking change?\n- [ ] Includes tests?\n- [ ] Includes documentation?\n\n## How This Was Tested\nLocal CI\n\n## Integration Instructions\nNo\n[…]\nschock@microsoft.com>\nCo-authored-by: Michael Kubacki <michael.kubacki@microsoft.com>\nCo-authored-by: Oliver Smith-Denny <osde@microsoft.com>\nCo-authored-by: srilatha sridharan <srisrid@microsoft.com>",
"is_bot": false,
"headline": "[Rebase&FF] Lastest 202502 changes (#837)",
"author_name": "Aaron",
"author_login": "apop5",
"committed_at": "2026-02-26T18:30:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c9ba1cc11f47d73667e4fd30d4836494783fe21e",
"body": "Bumps [pygount](https://github.com/roskakori/pygount) from 3.1.0 to\n3.1.1.\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "pip: bump pygount from 3.1.0 to 3.1.1 (#836)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-02-26T00:58:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e735ecb09498a53d460d1e2af802f1fe48836d77",
"body": "Bumps [regex](https://github.com/mrabarnett/mrab-regex) from 2026.1.15\nto 2026.2.19.\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "pip: bump regex from 2026.1.15 to 2026.2.19 (#835)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-02-25T22:41:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "38038d62323f94f71498813f0a34aa087a508994",
"body": "Signed-off-by: Project Mu UEFI Bot <uefibot@microsoft.com>",
"is_bot": true,
"headline": "Repo File Sync: synced file(s) with microsoft/mu_devops",
"author_name": "mu-automation[bot]",
"author_login": "mu-automation[bot]",
"committed_at": "2026-02-25T19:07:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "161c061eb6c353a690f81056e7309d34e7713647",
"body": "synced local file(s) with\n[microsoft/mu_devops](https://github.com/microsoft/mu_devops).\n\n🤖: View the [Repo File Sync Configuration\nFile](https://github.com/microsoft/mu_devops/blob/main/.sync/Files.yml)\nto see how files are synced.\n\n---\n\nThis PR was created automatically by the\n[repo-file-sync-acti\n[…]\ncom/microsoft/mu_devops/actions/runs/22390313041)\n\nSigned-off-by: Project Mu UEFI Bot <uefibot@microsoft.com>\nCo-authored-by: mu-automation[bot] <204385837+mu-automation[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Repo File Sync: CodeQL workflow (#838)",
"author_name": "mu-automation[bot]",
"author_login": "mu-automation[bot]",
"committed_at": "2026-02-25T16:34:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a203b5f7993cb16d004c6e34f2de9786945dc9cf",
"body": null,
"is_bot": false,
"headline": "Update Readme with 202511 Information.",
"author_name": "Aaron Pop",
"author_login": "apop5",
"committed_at": "2026-02-23T22:12:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6bb8c570e5540ee4734c798b18f485206e4d92b0",
"body": "Limit the recursive download of mu_basecore. Remove mu_silicon_intel_tiano and replace\nwith mu_common_intel_min_platform to satisfy the IntelSiliconPkg requirements for\nVtd unit tests.",
"is_bot": false,
"headline": "CISettings.py: Limit recursive download.",
"author_name": "aaronpop",
"author_login": "apop5",
"committed_at": "2026-02-23T22:12:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1fa06a04e8bf3b44366547c0dac33f35706cd3cc",
"body": "MsCorePkg contains an implementation of an AARCH64 library\nfor use in MpManagement application.\n\nThe library needed updated for removal of EL1_OR_EL2_OR_EL3\nmacro.",
"is_bot": false,
"headline": "MsCorePkg: Update EL1_OR_EL2 macros.",
"author_name": "aaronpop",
"author_login": "apop5",
"committed_at": "2026-02-23T22:12:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b993bfbb75ce655081dd4d0237b5535e7ebf1f35",
"body": "Fixing up commit fcb2146 which missed removal of another NonStopMode protocol.",
"is_bot": false,
"headline": "MsCorePkg: Remove last of NonStopMode protocols.",
"author_name": "Aaron Pop",
"author_login": "apop5",
"committed_at": "2026-02-23T22:12:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9835c3c676abe59f2aaf445c2337adbb54e7a067",
"body": null,
"is_bot": false,
"headline": "Update CI for 202511",
"author_name": "Aaron Pop",
"author_login": "apop5",
"committed_at": "2026-01-27T00:10:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6e4046be5d4c2278b7399efea60ae73f9206f629",
"body": "202511 remove the edk2 override that allowed testing of static internals.\nDue to the removal, some of the unit tests required modification to\nremove the associated tests.\n\nSome unit tests, (PeiCore, DxeCore, MMCore) ended up without any unit tests\nso they were entirely removed.",
"is_bot": false,
"headline": "AdvLoggerPkg: Update GoogleTests for 202511.",
"author_name": "Aaron Pop",
"author_login": "apop5",
"committed_at": "2026-01-27T00:10:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0fd1158a0ed12d4001e2c24c24772b022a7b0551",
"body": "gMemoryProtectionSpecialRegionProtocolGuid has been dropped. Removed references to it.\ngMemoryProtectionNonstopModeProtocolGuid has been dropped. Removed references to it.",
"is_bot": false,
"headline": "UefitestingPkg: Update for 202511",
"author_name": "Aaron Pop",
"author_login": "apop5",
"committed_at": "2026-01-27T00:10:55Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 100,
"commits_last_year": 163,
"latest_release_at": "2026-07-13T21:44:21Z",
"latest_release_tag": "v2025110003.0.1",
"releases_from_tags": false,
"days_since_last_push": 6,
"active_weeks_last_year": 44,
"days_since_latest_release": 8,
"mean_days_between_releases": 13
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 87,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"ecosystem": {
"packages": []
},
"popularity": {
"forks": 126,
"stars": 264,
"watchers": 20,
"fork_history": {
"days": [
{
"date": "2018-10-22",
"count": 1
},
{
"date": "2018-10-26",
"count": 1
},
{
"date": "2018-11-20",
"count": 1
},
{
"date": "2018-12-11",
"count": 1
},
{
"date": "2019-01-02",
"count": 1
},
{
"date": "2019-01-25",
"count": 1
},
{
"date": "2019-02-01",
"count": 1
},
{
"date": "2019-02-27",
"count": 1
},
{
"date": "2019-03-11",
"count": 1
},
{
"date": "2019-03-24",
"count": 2
},
{
"date": "2019-04-25",
"count": 1
},
{
"date": "2019-04-29",
"count": 1
},
{
"date": "2019-05-08",
"count": 1
},
{
"date": "2019-07-01",
"count": 1
},
{
"date": "2019-09-21",
"count": 1
},
{
"date": "2019-10-18",
"count": 1
},
{
"date": "2019-10-30",
"count": 1
},
{
"date": "2019-11-07",
"count": 1
},
{
"date": "2019-12-19",
"count": 1
},
{
"date": "2020-02-03",
"count": 1
},
{
"date": "2020-02-14",
"count": 1
},
{
"date": "2020-03-25",
"count": 1
},
{
"date": "2020-06-13",
"count": 1
},
{
"date": "2020-06-23",
"count": 1
},
{
"date": "2020-06-30",
"count": 1
},
{
"date": "2020-07-15",
"count": 1
},
{
"date": "2020-07-31",
"count": 1
},
{
"date": "2020-08-05",
"count": 1
},
{
"date": "2020-09-05",
"count": 1
},
{
"date": "2020-11-18",
"count": 1
},
{
"date": "2020-12-14",
"count": 1
},
{
"date": "2021-01-05",
"count": 1
},
{
"date": "2021-01-16",
"count": 1
},
{
"date": "2021-02-26",
"count": 1
},
{
"date": "2021-03-04",
"count": 1
},
{
"date": "2021-03-12",
"count": 1
},
{
"date": "2021-06-22",
"count": 1
},
{
"date": "2021-07-27",
"count": 1
},
{
"date": "2021-11-08",
"count": 1
},
{
"date": "2021-12-15",
"count": 1
},
{
"date": "2021-12-30",
"count": 1
},
{
"date": "2022-03-04",
"count": 1
},
{
"date": "2022-03-05",
"count": 1
},
{
"date": "2022-03-11",
"count": 1
},
{
"date": "2022-03-23",
"count": 1
},
{
"date": "2022-04-25",
"count": 1
},
{
"date": "2022-07-07",
"count": 1
},
{
"date": "2022-07-08",
"count": 1
},
{
"date": "2022-07-28",
"count": 1
},
{
"date": "2022-09-07",
"count": 1
},
{
"date": "2022-11-02",
"count": 1
},
{
"date": "2022-11-16",
"count": 1
},
{
"date": "2022-11-18",
"count": 1
},
{
"date": "2022-11-30",
"count": 1
},
{
"date": "2023-01-04",
"count": 1
},
{
"date": "2023-01-16",
"count": 1
},
{
"date": "2023-01-20",
"count": 1
},
{
"date": "2023-02-16",
"count": 1
},
{
"date": "2023-03-13",
"count": 1
},
{
"date": "2023-04-09",
"count": 1
},
{
"date": "2023-04-24",
"count": 1
},
{
"date": "2023-06-23",
"count": 1
},
{
"date": "2023-07-14",
"count": 1
},
{
"date": "2023-10-03",
"count": 1
},
{
"date": "2023-10-14",
"count": 1
},
{
"date": "2023-10-15",
"count": 1
},
{
"date": "2023-10-24",
"count": 1
},
{
"date": "2023-11-04",
"count": 1
},
{
"date": "2023-11-29",
"count": 1
},
{
"date": "2023-12-22",
"count": 1
},
{
"date": "2024-03-10",
"count": 1
},
{
"date": "2024-03-22",
"count": 1
},
{
"date": "2024-03-23",
"count": 1
},
{
"date": "2024-04-16",
"count": 1
},
{
"date": "2024-05-29",
"count": 1
},
{
"date": "2024-05-31",
"count": 1
},
{
"date": "2024-06-09",
"count": 1
},
{
"date": "2024-06-23",
"count": 1
},
{
"date": "2024-07-10",
"count": 1
},
{
"date": "2024-07-11",
"count": 1
},
{
"date": "2024-08-02",
"count": 1
},
{
"date": "2024-08-19",
"count": 1
},
{
"date": "2024-09-10",
"count": 1
},
{
"date": "2024-09-11",
"count": 1
},
{
"date": "2024-09-16",
"count": 1
},
{
"date": "2024-10-29",
"count": 1
},
{
"date": "2024-11-13",
"count": 1
},
{
"date": "2024-11-16",
"count": 1
},
{
"date": "2024-11-23",
"count": 1
},
{
"date": "2024-12-02",
"count": 1
},
{
"date": "2024-12-16",
"count": 1
},
{
"date": "2025-01-15",
"count": 1
},
{
"date": "2025-03-11",
"count": 1
},
{
"date": "2025-05-14",
"count": 1
},
{
"date": "2025-05-20",
"count": 1
},
{
"date": "2025-06-25",
"count": 1
},
{
"date": "2025-06-30",
"count": 1
},
{
"date": "2025-07-24",
"count": 1
},
{
"date": "2025-08-11",
"count": 1
},
{
"date": "2025-09-27",
"count": 1
},
{
"date": "2025-10-07",
"count": 1
},
{
"date": "2025-10-20",
"count": 1
},
{
"date": "2025-11-14",
"count": 1
},
{
"date": "2025-12-04",
"count": 1
},
{
"date": "2026-01-21",
"count": 1
},
{
"date": "2026-01-28",
"count": 2
},
{
"date": "2026-01-29",
"count": 1
},
{
"date": "2026-02-01",
"count": 1
},
{
"date": "2026-02-03",
"count": 1
},
{
"date": "2026-02-10",
"count": 1
},
{
"date": "2026-03-10",
"count": 1
},
{
"date": "2026-03-13",
"count": 1
},
{
"date": "2026-04-14",
"count": 1
},
{
"date": "2026-04-17",
"count": 1
},
{
"date": "2026-04-28",
"count": 1
},
{
"date": "2026-05-07",
"count": 2
},
{
"date": "2026-05-11",
"count": 2
},
{
"date": "2026-06-16",
"count": 1
},
{
"date": "2026-06-17",
"count": 1
},
{
"date": "2026-07-12",
"count": 1
}
],
"complete": true,
"collected": 124,
"total_forks": 126
},
"star_history": {
"days": [
{
"date": "2018-09-14",
"count": 1
},
{
"date": "2018-10-12",
"count": 1
},
{
"date": "2018-10-15",
"count": 1
},
{
"date": "2018-10-16",
"count": 1
},
{
"date": "2018-10-26",
"count": 1
},
{
"date": "2018-12-20",
"count": 4
},
{
"date": "2018-12-24",
"count": 1
},
{
"date": "2018-12-25",
"count": 1
},
{
"date": "2018-12-26",
"count": 1
},
{
"date": "2018-12-28",
"count": 1
},
{
"date": "2019-01-02",
"count": 1
},
{
"date": "2019-01-06",
"count": 1
},
{
"date": "2019-02-02",
"count": 1
},
{
"date": "2019-02-08",
"count": 1
},
{
"date": "2019-02-17",
"count": 1
},
{
"date": "2019-02-21",
"count": 1
},
{
"date": "2019-02-23",
"count": 1
},
{
"date": "2019-02-24",
"count": 1
},
{
"date": "2019-03-01",
"count": 1
},
{
"date": "2019-03-06",
"count": 1
},
{
"date": "2019-03-09",
"count": 5
},
{
"date": "2019-03-11",
"count": 1
},
{
"date": "2019-03-24",
"count": 3
},
{
"date": "2019-04-16",
"count": 1
},
{
"date": "2019-04-22",
"count": 1
},
{
"date": "2019-04-29",
"count": 1
},
{
"date": "2019-05-02",
"count": 1
},
{
"date": "2019-05-08",
"count": 1
},
{
"date": "2019-05-09",
"count": 1
},
{
"date": "2019-05-10",
"count": 1
},
{
"date": "2019-05-15",
"count": 1
},
{
"date": "2019-05-18",
"count": 1
},
{
"date": "2019-06-11",
"count": 1
},
{
"date": "2019-06-15",
"count": 1
},
{
"date": "2019-06-18",
"count": 1
},
{
"date": "2019-07-01",
"count": 2
},
{
"date": "2019-07-05",
"count": 1
},
{
"date": "2019-07-13",
"count": 1
},
{
"date": "2019-07-22",
"count": 2
},
{
"date": "2019-07-23",
"count": 1
},
{
"date": "2019-08-02",
"count": 2
},
{
"date": "2019-08-11",
"count": 1
},
{
"date": "2019-08-15",
"count": 1
},
{
"date": "2019-08-19",
"count": 2
},
{
"date": "2019-08-20",
"count": 1
},
{
"date": "2019-09-02",
"count": 1
},
{
"date": "2019-09-22",
"count": 1
},
{
"date": "2019-10-05",
"count": 1
},
{
"date": "2019-10-09",
"count": 1
},
{
"date": "2019-10-13",
"count": 1
},
{
"date": "2019-10-18",
"count": 2
},
{
"date": "2019-10-22",
"count": 1
},
{
"date": "2019-11-11",
"count": 1
},
{
"date": "2019-11-20",
"count": 1
},
{
"date": "2019-12-13",
"count": 1
},
{
"date": "2019-12-30",
"count": 2
},
{
"date": "2020-02-03",
"count": 1
},
{
"date": "2020-02-09",
"count": 1
},
{
"date": "2020-02-13",
"count": 1
},
{
"date": "2020-02-21",
"count": 1
},
{
"date": "2020-05-08",
"count": 1
},
{
"date": "2020-05-09",
"count": 1
},
{
"date": "2020-06-07",
"count": 1
},
{
"date": "2020-06-13",
"count": 1
},
{
"date": "2020-06-15",
"count": 1
},
{
"date": "2020-06-23",
"count": 1
},
{
"date": "2020-07-04",
"count": 1
},
{
"date": "2020-07-15",
"count": 1
},
{
"date": "2020-08-05",
"count": 1
},
{
"date": "2020-08-08",
"count": 1
},
{
"date": "2020-08-26",
"count": 1
},
{
"date": "2020-09-15",
"count": 1
},
{
"date": "2020-12-09",
"count": 1
},
{
"date": "2021-01-21",
"count": 1
},
{
"date": "2021-03-09",
"count": 1
},
{
"date": "2021-03-23",
"count": 1
},
{
"date": "2021-04-14",
"count": 1
},
{
"date": "2021-04-15",
"count": 1
},
{
"date": "2021-04-20",
"count": 1
},
{
"date": "2021-04-24",
"count": 1
},
{
"date": "2021-06-05",
"count": 1
},
{
"date": "2021-06-11",
"count": 1
},
{
"date": "2021-07-04",
"count": 1
},
{
"date": "2021-07-14",
"count": 1
},
{
"date": "2021-07-22",
"count": 1
},
{
"date": "2021-07-27",
"count": 1
},
{
"date": "2021-09-08",
"count": 1
},
{
"date": "2021-09-16",
"count": 1
},
{
"date": "2021-09-30",
"count": 1
},
{
"date": "2021-11-17",
"count": 1
},
{
"date": "2021-11-24",
"count": 1
},
{
"date": "2021-12-01",
"count": 1
},
{
"date": "2021-12-26",
"count": 1
},
{
"date": "2021-12-30",
"count": 1
},
{
"date": "2022-01-02",
"count": 1
},
{
"date": "2022-01-18",
"count": 3
},
{
"date": "2022-01-19",
"count": 1
},
{
"date": "2022-01-22",
"count": 1
},
{
"date": "2022-02-01",
"count": 1
},
{
"date": "2022-02-07",
"count": 1
},
{
"date": "2022-02-23",
"count": 1
},
{
"date": "2022-02-28",
"count": 1
},
{
"date": "2022-03-17",
"count": 1
},
{
"date": "2022-03-29",
"count": 1
},
{
"date": "2022-04-08",
"count": 1
},
{
"date": "2022-04-21",
"count": 1
},
{
"date": "2022-04-25",
"count": 1
},
{
"date": "2022-05-03",
"count": 1
},
{
"date": "2022-05-05",
"count": 1
},
{
"date": "2022-05-17",
"count": 1
},
{
"date": "2022-05-21",
"count": 1
},
{
"date": "2022-05-22",
"count": 1
},
{
"date": "2022-05-29",
"count": 1
},
{
"date": "2022-08-08",
"count": 1
},
{
"date": "2022-08-11",
"count": 1
},
{
"date": "2022-09-07",
"count": 1
},
{
"date": "2022-10-04",
"count": 1
},
{
"date": "2022-10-24",
"count": 1
},
{
"date": "2022-10-26",
"count": 1
},
{
"date": "2022-11-11",
"count": 1
},
{
"date": "2022-11-15",
"count": 1
},
{
"date": "2022-11-19",
"count": 1
},
{
"date": "2022-12-14",
"count": 1
},
{
"date": "2023-01-06",
"count": 1
},
{
"date": "2023-01-10",
"count": 1
},
{
"date": "2023-01-25",
"count": 2
},
{
"date": "2023-02-03",
"count": 1
},
{
"date": "2023-04-15",
"count": 1
},
{
"date": "2023-04-18",
"count": 1
},
{
"date": "2023-04-29",
"count": 1
},
{
"date": "2023-05-03",
"count": 1
},
{
"date": "2023-05-09",
"count": 1
},
{
"date": "2023-06-05",
"count": 1
},
{
"date": "2023-06-17",
"count": 1
},
{
"date": "2023-06-18",
"count": 2
},
{
"date": "2023-06-20",
"count": 1
},
{
"date": "2023-07-05",
"count": 1
},
{
"date": "2023-07-15",
"count": 1
},
{
"date": "2023-07-25",
"count": 1
},
{
"date": "2023-08-08",
"count": 1
},
{
"date": "2023-08-20",
"count": 1
},
{
"date": "2023-08-22",
"count": 1
},
{
"date": "2023-08-31",
"count": 1
},
{
"date": "2023-10-11",
"count": 1
},
{
"date": "2023-10-14",
"count": 2
},
{
"date": "2023-10-15",
"count": 9
},
{
"date": "2023-10-16",
"count": 1
},
{
"date": "2023-10-27",
"count": 1
},
{
"date": "2023-11-04",
"count": 1
},
{
"date": "2023-11-06",
"count": 1
},
{
"date": "2023-11-08",
"count": 1
},
{
"date": "2023-11-19",
"count": 1
},
{
"date": "2023-11-24",
"count": 1
},
{
"date": "2023-11-29",
"count": 1
},
{
"date": "2023-12-19",
"count": 1
},
{
"date": "2023-12-20",
"count": 1
},
{
"date": "2024-03-14",
"count": 2
},
{
"date": "2024-03-22",
"count": 1
},
{
"date": "2024-04-02",
"count": 1
},
{
"date": "2024-04-13",
"count": 1
},
{
"date": "2024-05-06",
"count": 1
},
{
"date": "2024-05-14",
"count": 2
},
{
"date": "2024-05-19",
"count": 1
},
{
"date": "2024-06-05",
"count": 1
},
{
"date": "2024-06-09",
"count": 1
},
{
"date": "2024-06-18",
"count": 1
},
{
"date": "2024-06-19",
"count": 2
},
{
"date": "2024-06-20",
"count": 1
},
{
"date": "2024-06-21",
"count": 2
},
{
"date": "2024-07-01",
"count": 1
},
{
"date": "2024-08-04",
"count": 1
},
{
"date": "2024-08-07",
"count": 1
},
{
"date": "2024-08-24",
"count": 1
},
{
"date": "2024-09-02",
"count": 1
},
{
"date": "2024-09-10",
"count": 1
},
{
"date": "2024-09-28",
"count": 1
},
{
"date": "2024-10-20",
"count": 1
},
{
"date": "2024-10-24",
"count": 1
},
{
"date": "2024-11-08",
"count": 1
},
{
"date": "2024-11-25",
"count": 1
},
{
"date": "2024-12-09",
"count": 1
},
{
"date": "2024-12-12",
"count": 1
},
{
"date": "2024-12-27",
"count": 1
},
{
"date": "2025-01-07",
"count": 1
},
{
"date": "2025-01-09",
"count": 1
},
{
"date": "2025-01-18",
"count": 2
},
{
"date": "2025-01-31",
"count": 1
},
{
"date": "2025-02-03",
"count": 1
},
{
"date": "2025-02-04",
"count": 1
},
{
"date": "2025-03-11",
"count": 2
},
{
"date": "2025-03-28",
"count": 1
},
{
"date": "2025-03-31",
"count": 1
},
{
"date": "2025-04-04",
"count": 1
},
{
"date": "2025-04-15",
"count": 1
},
{
"date": "2025-04-18",
"count": 1
},
{
"date": "2025-04-26",
"count": 1
},
{
"date": "2025-05-18",
"count": 1
},
{
"date": "2025-05-20",
"count": 1
},
{
"date": "2025-05-21",
"count": 1
},
{
"date": "2025-05-30",
"count": 1
},
{
"date": "2025-05-31",
"count": 1
},
{
"date": "2025-06-06",
"count": 1
},
{
"date": "2025-07-02",
"count": 1
},
{
"date": "2025-07-08",
"count": 1
},
{
"date": "2025-08-05",
"count": 1
},
{
"date": "2025-08-20",
"count": 1
},
{
"date": "2025-09-05",
"count": 1
},
{
"date": "2025-09-15",
"count": 1
},
{
"date": "2025-09-20",
"count": 1
},
{
"date": "2025-10-07",
"count": 1
},
{
"date": "2025-10-14",
"count": 1
},
{
"date": "2025-11-10",
"count": 1
},
{
"date": "2025-11-16",
"count": 1
},
{
"date": "2025-11-25",
"count": 1
},
{
"date": "2025-12-08",
"count": 1
},
{
"date": "2025-12-15",
"count": 1
},
{
"date": "2026-01-11",
"count": 1
},
{
"date": "2026-01-28",
"count": 2
},
{
"date": "2026-03-11",
"count": 1
},
{
"date": "2026-03-12",
"count": 1
},
{
"date": "2026-03-31",
"count": 1
},
{
"date": "2026-04-01",
"count": 1
},
{
"date": "2026-04-03",
"count": 1
},
{
"date": "2026-04-07",
"count": 1
},
{
"date": "2026-05-02",
"count": 1
},
{
"date": "2026-05-10",
"count": 1
},
{
"date": "2026-06-01",
"count": 1
},
{
"date": "2026-06-22",
"count": 1
},
{
"date": "2026-07-11",
"count": 1
}
],
"complete": true,
"collected": 264,
"total_stars": 264
},
"open_issues_and_prs": 10
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": true,
"typecheck_configs": [],
"toolchain_manifests": [
"AdvLoggerPkg/Crates/RustAdvancedLoggerDxe/Cargo.toml",
"Cargo.toml",
"HidPkg/Crates/HidIo/Cargo.toml",
"HidPkg/Crates/HiiKeyboardLayout/Cargo.toml",
"HidPkg/UefiHidDxe/Cargo.toml",
"HidPkg/UefiHidDxeV2/Cargo.toml",
"MsCorePkg/Crates/RustBootServicesAllocatorDxe/Cargo.toml",
"MsWheaPkg/Crates/MuTelemetryHelperLib/Cargo.toml"
],
"largest_source_bytes": 719599,
"source_files_sampled": 658,
"oversized_source_files": 34,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"Cargo.toml"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 6,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"crates"
],
"dependencies": [
{
"name": "HidIo",
"manifest": "HidPkg/UefiHidDxe/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "hidparser",
"manifest": "HidPkg/UefiHidDxe/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "HiiKeyboardLayout",
"manifest": "HidPkg/UefiHidDxe/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "memoffset",
"manifest": "HidPkg/UefiHidDxe/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "r-efi",
"manifest": "HidPkg/UefiHidDxe/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "rustversion",
"manifest": "HidPkg/UefiHidDxe/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "RustBootServicesAllocatorDxe",
"manifest": "HidPkg/UefiHidDxe/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "RustAdvancedLoggerDxe",
"manifest": "HidPkg/UefiHidDxe/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "HidIo",
"manifest": "HidPkg/UefiHidDxeV2/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "hidparser",
"manifest": "HidPkg/UefiHidDxeV2/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "HiiKeyboardLayout",
"manifest": "HidPkg/UefiHidDxeV2/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "patina",
"manifest": "HidPkg/UefiHidDxeV2/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "r-efi",
"manifest": "HidPkg/UefiHidDxeV2/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "RustAdvancedLoggerDxe",
"manifest": "HidPkg/UefiHidDxeV2/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
},
{
"name": "scroll",
"manifest": "HidPkg/UefiHidDxeV2/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "Microsoft.Windows.CppWinRT",
"direct": false,
"version": "2.0.240111.5",
"ecosystem": "nuget"
},
{
"name": "antlr4-python3-runtime",
"direct": false,
"version": "4.13.2",
"ecosystem": "pypi"
},
{
"name": "edk2-pytool-extensions",
"direct": false,
"version": "0.31.0",
"ecosystem": "pypi"
},
{
"name": "edk2-pytool-library",
"direct": false,
"version": "0.23.15",
"ecosystem": "pypi"
},
{
"name": "pygount",
"direct": false,
"version": "3.2.0",
"ecosystem": "pypi"
},
{
"name": "regex",
"direct": false,
"version": "2026.7.10",
"ecosystem": "pypi"
}
],
"collected": true,
"truncated": false,
"total_count": 6,
"direct_count": 0,
"indirect_count": 6
}
},
"maintainership": {
"issues": {
"open_prs": 6,
"merged_prs": 703,
"open_issues": 4,
"closed_ratio": 0.938,
"closed_issues": 61,
"closed_unmerged_prs": 145
},
"bus_factor": 4,
"bot_contributors": 2,
"top_contributors": [
{
"type": "User",
"login": "mikeytdisco",
"commits": 226,
"avatar_url": "https://avatars.githubusercontent.com/u/17346646?v=4"
},
{
"type": "User",
"login": "TaylorBeebe",
"commits": 134,
"avatar_url": "https://avatars.githubusercontent.com/u/31827475?v=4"
},
{
"type": "User",
"login": "kuqin12",
"commits": 118,
"avatar_url": "https://avatars.githubusercontent.com/u/42554914?v=4"
},
{
"type": "User",
"login": "makubacki",
"commits": 113,
"avatar_url": "https://avatars.githubusercontent.com/u/21320094?v=4"
},
{
"type": "User",
"login": "apop5",
"commits": 66,
"avatar_url": "https://avatars.githubusercontent.com/u/105021049?v=4"
},
{
"type": "User",
"login": "uefibot",
"commits": 53,
"avatar_url": "https://avatars.githubusercontent.com/u/45776386?v=4"
},
{
"type": "User",
"login": "joschock",
"commits": 42,
"avatar_url": "https://avatars.githubusercontent.com/u/28811593?v=4"
},
{
"type": "User",
"login": "spbrogan",
"commits": 39,
"avatar_url": "https://avatars.githubusercontent.com/u/2954441?v=4"
},
{
"type": "User",
"login": "os-d",
"commits": 33,
"avatar_url": "https://avatars.githubusercontent.com/u/25697595?v=4"
},
{
"type": "User",
"login": "kenlautner",
"commits": 26,
"avatar_url": "https://avatars.githubusercontent.com/u/85201046?v=4"
}
],
"contributors_sampled": 68,
"top_contributor_share": 0.219
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"auto-approve.yml",
"auto-merge.yml",
"codeql.yml",
"file-paths.yml",
"issue-assignment.yml",
"label-issues.yml",
"label-sync.yml",
"mu-pr-validation-pending.yml",
"mu-pr-validation-post.yml",
"mu-pr-validation.yml",
"pull-request-formatting-validator.yml",
"regex-pull-requests.yml",
"release-draft.yml",
"scheduled-maintenance.yml",
"stale.yml",
"triage-issues.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 9,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "21 out of 21 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 10,
"reason": "all changesets reviewed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 5 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 9,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 10,
"reason": "SAST tool is run on all commits",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "553e629fa87fc6d5136c8bb90bcaa9e12a4f8b87",
"ran_at": "2026-07-22T03:33:59Z",
"aggregate_score": 7.7,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": true,
"has_security_policy": true,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-22T03:09:38Z",
"oldest_open_prs": [
{
"number": 811,
"created_at": "2026-01-08T07:58:07Z",
"last_comment_at": "2026-06-07T23:54:25Z",
"last_comment_author": "mu-automation"
},
{
"number": 891,
"created_at": "2026-05-25T15:33:15Z",
"last_comment_at": "2026-05-25T15:42:42Z",
"last_comment_author": "codecov-commenter"
},
{
"number": 913,
"created_at": "2026-06-26T18:03:07Z",
"last_comment_at": "2026-06-26T21:18:28Z",
"last_comment_author": "codecov-commenter"
},
{
"number": 916,
"created_at": "2026-06-29T10:03:59Z",
"last_comment_at": "2026-06-29T10:49:40Z",
"last_comment_author": "codecov-commenter"
},
{
"number": 919,
"created_at": "2026-07-14T18:23:29Z",
"last_comment_at": "2026-07-14T18:24:50Z",
"last_comment_author": "mu-automation"
},
{
"number": 922,
"created_at": "2026-07-16T00:26:23Z",
"last_comment_at": "2026-07-16T00:26:35Z",
"last_comment_author": "mu-automation"
}
],
"last_merged_pr_at": "2026-07-16T00:24:33Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 529,
"created_at": "2024-07-23T20:49:41Z",
"last_comment_at": "2025-09-25T17:54:41Z",
"last_comment_author": "trhpx"
},
{
"number": 679,
"created_at": "2025-05-07T20:03:38Z",
"last_comment_at": "2025-07-24T16:09:03Z",
"last_comment_author": "cfernald"
},
{
"number": 910,
"created_at": "2026-06-25T18:03:19Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 914,
"created_at": "2026-06-26T22:59:27Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/microsoft/mu_plus",
"host": "github.com",
"name": "mu_plus",
"owner": "microsoft"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": null,
"notes": [],
"value": 81,
"inputs": {
"security": 82,
"vitality": 96,
"community": 74,
"governance": 85,
"engineering": 67
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 96,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "excellent",
"name": "Development activity",
"note": null,
"notes": [],
"value": 94,
"inputs": {
"commits_last_year": 163,
"human_commit_share": 0.74,
"days_since_last_push": 6,
"active_weeks_last_year": 44
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 6 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 6
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "44/52 weeks with commits",
"points": 30.5,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 44
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "163 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 163
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 100,
"latest_release_tag": "v2025110003.0.1",
"releases_from_tags": false,
"days_since_latest_release": 8,
"mean_days_between_releases": 13
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "100 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 100
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 8 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 8
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~13 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 13
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 8,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 8 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 8
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "good",
"name": "Community & Adoption",
"value": 74,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "moderate",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"forks": 126,
"stars": 264,
"watchers": 20,
"growth_state": "organic",
"growth_factor_pct": 100
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "264 stars",
"points": 39.3,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 264
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "126 forks",
"points": 17.5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 126
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "20 watchers",
"points": 7.1,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 20
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "excellent",
"name": "Community health",
"note": null,
"notes": [],
"value": 86,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "license file present, not a recognized license",
"points": 16.9,
"status": "partial",
"details": [
{
"code": "license_custom",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "excellent",
"name": "Sustainability & Governance",
"value": 85,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "good",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"bus_factor": 4,
"contributors_sampled": 68,
"top_contributor_share": 0.219
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "4 contributor(s) cover half of all commits",
"points": 43.2,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 4
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 22% of commits",
"points": 17.6,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 22
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "68 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 68
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 5 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "excellent",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 91,
"inputs": {
"merged_prs": 703,
"open_issues": 4,
"closed_issues": 61,
"issue_closed_ratio": 0.938,
"closed_unmerged_prs": 145
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "94% of issues closed",
"points": 43.9,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 94
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "703/848 decided PRs merged",
"points": 31.7,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 703,
"decided": 848
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "all changesets reviewed",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"followers": 125580,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "microsoft",
"public_repos": 8215,
"account_age_days": 4606
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "125,580 followers of microsoft",
"points": 25,
"status": "met",
"details": [
{
"code": "owner_followers",
"params": {
"count": 125580,
"login": "microsoft"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "8215 public repos, account ~12 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 8215
}
},
{
"code": "account_age_years",
"params": {
"years": 12
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 67,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "16 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 16
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "21 out of 21 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"topics": [
"firmware",
"uefi",
"projectmu",
"uefi-development"
],
"has_wiki": false,
"homepage": "https://microsoft.github.io/mu/",
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://microsoft.github.io/mu/",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "4 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 4
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "good",
"name": "Security",
"value": 82,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "good",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 77,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 7.7
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "21 out of 21 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "all changesets reviewed",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 5 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is run on all commits",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 6 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories",
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 6
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 6,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 6,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 6
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 62,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.905,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "67 of 74 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 67,
"sampled": 74
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 66,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": true,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0.01,
"toolchain_manifests": [
"AdvLoggerPkg/Crates/RustAdvancedLoggerDxe/Cargo.toml",
"Cargo.toml",
"HidPkg/Crates/HidIo/Cargo.toml",
"HidPkg/Crates/HiiKeyboardLayout/Cargo.toml",
"HidPkg/UefiHidDxe/Cargo.toml",
"HidPkg/UefiHidDxeV2/Cargo.toml",
"MsCorePkg/Crates/RustBootServicesAllocatorDxe/Cargo.toml",
"MsWheaPkg/Crates/MuTelemetryHelperLib/Cargo.toml"
],
"dependency_bot_commit_share": 0.12
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "AdvLoggerPkg/Crates/RustAdvancedLoggerDxe/Cargo.toml, Cargo.toml, HidPkg/Crates/HidIo/Cargo.toml (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "AdvLoggerPkg/Crates/RustAdvancedLoggerDxe/Cargo.toml, Cargo.toml, HidPkg/Crates/HidIo/Cargo.toml"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "C (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "C"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "devcontainer",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "devcontainer"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "1 of the last 100 commits agent-authored or agent-credited",
"points": 2,
"status": "partial",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 1,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "12 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 12,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 97,
"inputs": {
"primary_language": "C",
"largest_source_bytes": 719599,
"source_files_sampled": 658,
"oversized_source_files": 34
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "C (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "C"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "34/658 source files over 60KB",
"points": 52.2,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 658,
"oversized": 34
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Could not fetch crates package 'UefiHidDxe' from its registry",
"Could not fetch crates package 'UefiHidDxeV2' from its registry"
],
"report_type": "repository",
"generated_at": "2026-07-22T03:34:34.065245Z",
"schema_version": "0.26.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/m/microsoft/mu_plus.svg",
"full_name": "microsoft/mu_plus",
"license_state": "custom",
"license_spdx": null
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with microsoft/mu_plus. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.26.0 — full methodology · metrics wiki.
